<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1258">
<package pkgid="ea26251730272d10a24e04fc654accb418c4a1923574ac2d0fc6e028edf5e900" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="80746ed8e9f45a27652cb72c69b1955ecab842656f2c958d77d63ba809764f91" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="0ab1048f4c03e262ae180f289073af3c54efc7487c246d34f4ab27086da92a73" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="61c3e3686ac7f3a84d185fb2df821bbba116afcf2b82f585bc578f78d0ec30c6" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="c41eb2818f445c517eed89eb73408a8198e653928493d7ec09f0f9aceb79713e" name="389-ds-base" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="2e2fde905815dfc8b3612df17d93f973475d67db81fc77149fc6a17f1fb65926" name="389-ds-base" arch="src">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="d6f2d7792c90dc8b8a574aecd027517164e3274b23e53d8fc78d338f55f7ed1a" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="7f251c3f9482de042efbe0f698e31867546ee4429a2abe0f6b0d7aaab7c9cf52" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="b1c27fa772f377b45a62078bb4134a8a0391ee61acd45eba1e5dc6fbec9fa145" name="389-ds-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="5a8938f5a67ccca25cd2943a0c3240cce504d6f7b14c78c5315543d76693536c" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="1cbebdf1a0a3ad49fd9c84ea03323e7f680b5bb97e50cbf811a54608ad9903b3" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="0545d5ec19fbd12bb6fee86dab70cd4545bb7db622fc86c13f1e1130c886a957" name="389-ds-base-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="5a1bebc71fa65728d845bb7b3287037b5cef0e6b21b72f232f5eecc05275f91d" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="1a3bb22268fb59e5ba7a76c0e07631cf0e0377b73f90ba9af1583a9737eb6e38" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="bcc376db056d261f5767ea023353812c45938924893f51880c2c90ab876841ee" name="389-ds-base-libs" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="c5acf0f3df8e8d2d7f410819ca68559416125a98459d1cbdd9162d22f10c0d5a" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="cdd5dae70652fd0c328cb3f7cb6e659270c2cf72ddcab1b5cc457e757b9ea535" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="542da135bb3ae33578e323414804c24391dac24798237f1f08cd67da38b5ee77" name="389-ds-base-snmp" arch="ppc64le">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="b592328b407e276975d92a54338f609b00fe7ebe043644f06d22cf33544c8553" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="21.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-12" date="1515758400">- Bump version to 1.3.7.5-12
- Resolves: Bug 1459946 - GetEffectiveRights gives false-negative with ACIs containing targetfilter
- Resolves: Bug 1507194 - cleanallruv could break replication if anchor csn in ruv originated in deleted replica
- Resolves: Bug 1517788 - password policy: minimum token length fails when the token length is equal to attribute length
- Resolves: Bug 1518287 - heap-use-after-free in csn_as
- Resolves: Bug 1531153 - Indexing of internationalized matching rules is failing
- Resolves: Bug 1517383 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired
- Resolves: Bug 1523183 - search with CoS attribute is getting slower after modifying/adding CosTemplate
- Resolves: Bug 1457315 - cmocka tests are not executed during rpm build
- Resolves: Bug 1516309 - After cleanALLruv, replication is looping on keep alive DEL</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-13" date="1516276800">- Bump version to 1.3.7.5-13
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7
- Resolves: Bug 1534379 - CVE-2017-15134: Remote DoS via search filters in slapi_filter_sprintf in slapd/util.c 
- Resolves: Bug 1533571 - memberof: schema violation error message is confusing as memberof will likely repair target entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-14" date="1516968000">- Bump version to 1.3.7.5-14
- Resolves: Bug 1519406 - New defects found in 389-ds-base-1.3.7.5-3.el7 (fix regression in -13)</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
</package>
<package pkgid="cffec4d88b6a8e3478f4559b9d93b6d88f51a26e6bd2aa9a0ae83e6937023421" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="24.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-15" date="1517918400">- Bump version to 1.3.7.5-15
- Resolves: Bug 1533828 - Server allows to set nsds5replicaid=65535 in the existing replica entry
- Resolves: Bug 1535515 - local password policies should use the same defaults as the global policy
- Resolves: Bug 1541108 - Allow CRL handling to be configurable for outgoing connections</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918401">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
</package>
<package pkgid="1130fbb8340aa9f5d7d56f609ebed25bbab3b17cf27ed1b588e95b3b4d363812" name="389-ds-base-tests" arch="noarch">
  <version epoch="0" ver="1.3.7.5" rel="25.el7_5"/>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-16" date="1517918400">- Bump version to 1.3.7.5-16
- Resolves: Bug 1542645 - Outgoing secure connection is failing with recent OpenLDAP</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5.17" date="1518436800">- Bump version to 1.3.7.5.17
- Resolves: Bug 1539082 - Child entry cenotaphs should not prevent the deletion of the parent
- Resolves: Bug 1540106 - CVE-2018-1054 - remote Denial of Service (DoS) via search filters in SetUnicodeStringFromUTF_8 
- Resolves: Bug 1535538 - CVE-2017-15135 - Authentication bypass due to lack of size check in slapi_ct_memcmp</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-18" date="1518436801">- Bump version to 1.3.7.5-18
- Resolves: Bug 1539082 - Fix memory leak</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 1.3.7.5-19" date="1522756800">- Bump version to 1.3.7.5-19
- Resolves: Bug 1563107 - IPA server is not responding, all authentication and admin tests failed [rhel-7.5.z]</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-20" date="1522843200">- Bump version to 1.3.7.5-20
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received 
- Resolves: Bug 1559764 - memberof fails if group is moved into scope
- Resolves: Bug 1554720 - "Truncated search results" pop-up appears in user details in WebUI 
- Resolves: Bug 1553605 - ipa-server-install fails with Error: Upgrade failed with no such entry
- Resolves: Bug 1559760 - ds-replcheck: add -W option to ask for the password from stdin instead of passing it on command line
- Resolves: Bug 1559464 - replica_write_ruv log a failure even when it succeeds</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-21" date="1522929600">- Bump version to 1.3.7.5-21
- Resolves: Bug 1559818 - EMBARGOED CVE-2018-1089 389-ds-base: ns-slapd crash via large filter value in ldapsearch</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-22" date="1526904000">- Bump version to 1.3.5.7-22
- Resolves: Bug 1563079 - adjustment of csn_generator can fail so next generated csn can be equal to the most recent one received
- Resolves: Bug 1579702 - Replication stops working when MemberOf plugin is enabled on hub and consumer
- Resolves: Bug 1579698 - replicated operations should be serialized
- Resolves: Bug 1579700 - Upgrade script doesn't enable PBKDF password storage plug-in
- Resolves: Bug 1580257 - ds-replcheck LDIF comparision fails when checking for conflicts
- Resolves: Bug 1580523 - ns-slapd segfaults with ERR - connection_release_nolock_ext - conn=0 fd=0 Attempt to release connection that is not acquired</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-23" date="1527854400">- Bump version to 1.3.7.5-23
- Resolves: Bug 1581588 - ACI deny rules do not work correctly
- Resolves: Bug 1582747 - DS only accepts RSA and Fortezza cipher families</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-24" date="1528891200">- Bump version to 1.3.7.5-24
- Resolves: Bug 1580257 - Fix certificate directory verification</changelog>
  <changelog author="Mark Reynolds &lt;mreynolds@redhat.com&gt; - 1.3.7.5-25" date="1530619200">- Bump version to 1.3.7.5-25
- Resolves: Bug 1597530 - Async operations can hang when the server is running nunc-stans</changelog>
</package>
<package pkgid="2c4cb69f6604b8235503b267842982a4590d5de437887a9aa41501dbeda70250" name="NetworkManager" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="e714020dbc4b2ce878a503e50c4c10a05498b4aed27745a11b741c98ed73e750" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="2251eb860534a49614f6404962fed4dfa266a2c683164b50e2429b3217dc9c82" name="NetworkManager" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="5deb9f2416e31e95fdb3c1bd5bd0d61f13fa46a34518afbed2e4d6c3163a4895" name="NetworkManager" arch="src">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="111f2be4957b451d247ecd2bb5a379e31c67ffd3e473bf12c3632f3cfa17db9a" name="NetworkManager-adsl" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="f42c277a7d1e28da222f15e1a2619941f61ec9c6deebb1558880fb74e7362661" name="NetworkManager-adsl" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="84e34489143edce5add2b2573bad7641f9ed2b87cbb1ab6dc6dd593d92e98b5e" name="NetworkManager-bluetooth" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="20c670e531976385b2b84e8cf256fd6389ceb9f6088d22f4fef0d940aaed61f8" name="NetworkManager-bluetooth" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="2bf97058ab9397a0d0ac459c21cc4bdc31a587eb91335a8fc3f87da0f53d030f" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="fdef553c1d5e45fe9260a62ec8b6f47daa7329e5efc70f20df0b308e236e6a65" name="NetworkManager-config-server" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="68e456ae37127b8e33213d42e0dcb37bce6a68c8348fb622c719f114f401d819" name="NetworkManager-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="0fd9847e0e9ee040de716b7e9d5ce9fdf42e6c3b5ecab3f99c273e8230324b00" name="NetworkManager-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="39177bea90a61ff0323927f7e1d2a7b42eeeca6c49e796de7da04e309366b607" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="1aa0ca989443c9964bfe015f19d0091f17444d346ef3bfda6ecbce4acf0221df" name="NetworkManager-dispatcher-routing-rules" arch="noarch">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="34e0eb06b6bfbc2293fe4835eec9160f02876c340d401245796ac2d5e6b8707a" name="NetworkManager-glib" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="2c53d89d113c357c629c04310f350f84a8824daa7b84722fc70ea5e81051f386" name="NetworkManager-glib" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="054f78d1861d2ca08c6a3aca1665491a08a246ffd3d3d2fa5158d7e5b935249f" name="NetworkManager-glib-devel" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="f03f1306c6e02ffd3a6f698bfb79d6939354d435daf5b8ab5a8c162bd55085e9" name="NetworkManager-glib-devel" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="f241f4e5902a5805ce2d6fc91f4842959c2f7058337b37d945e224b47be34cb6" name="NetworkManager-libnm" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="28a21ef1340ff98abeb25aa8da32c40caa423f1abf630d003df1c5fe8a6b32a1" name="NetworkManager-libnm" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="5cffad4b5a81634d5ce2dd5f039e1670de965c9923a3e13459ee0b87dd0c1b0c" name="NetworkManager-libnm-devel" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="fe96eb63e5ac36d2f1081e7cb5987aa1b48950524ce7a4db6dff318efd326c2f" name="NetworkManager-libnm-devel" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="4751907f46575b50cd75119b89494aaaba0d33dd937a22ec5131c95dde34aefe" name="NetworkManager-ovs" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="d7b8f945ad1d860a4e1419453f5cabbd0c8feefd3177e255650f7802a8aa39c1" name="NetworkManager-ovs" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="e97458236b57f264a64cc43ed2810f40421b367dfd99f22bd823069d4082fdba" name="NetworkManager-ppp" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="90b18eeaa326925ec36f8729dcbaeae7cbfbd8eb623de48a040df2b39b33228f" name="NetworkManager-ppp" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="e4a4e27bf7bb4507e19e82c3ef0fb32014e328dfa6996066436309ce7692461c" name="NetworkManager-team" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="d5c3c7389fdce5ed4a8d13d58659a66bbc254b213f9852789af85bf33040de3d" name="NetworkManager-team" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="0b733670f737ede22ebc3bd4358ac3b3d3aa3aeedbfbae253d08fe6ffb991fb7" name="NetworkManager-tui" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="35dacc23335302fa8ce2545507bff492cf9e23aceb42569b747c736cd8bd286e" name="NetworkManager-tui" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="b9c74373de2a3f873dd8a6580c72aba08c156f9a80a06254a9bf7444aa3fb258" name="NetworkManager-wifi" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="c91d8dd0024b5836cc0fc749143b795878f68453b0620929468b1c7a216bb740" name="NetworkManager-wifi" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="6c0f6f82c0c2dd7d0054e3d74aac6b529f6c149f3eb5c929ea8523131934e206" name="NetworkManager-wwan" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="14.el7_5"/>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-4" date="1515153600">- settings: clear unsaved flag on new connections (rh #1525078)
- platform-linux: reload qdiscs and tfilters after removing them (rh #1527197)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-5" date="1515499200">- wwan: add default route even if modem didn't return a gateway (rh #1527934)
- dhcp: fix assertion failure for dhcp-client-id (rh #1531173)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
</package>
<package pkgid="888f315385576f2cb265739a6ff44a5bef48c34b009c19fcc4c7128ecc33c79d" name="NetworkManager-wwan" arch="ppc64le">
  <version epoch="1" ver="1.10.2" rel="16.el7_5"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-6" date="1516017600">- core: use distinct route-metric to keep connectivity on first activated device (rh #1505893)
- core: fix enabling connectivity-check-enabled via D-Bus (rh #1534477)
- core: fix invalid assertion deleting volatile connection (rh #1506552)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-7" date="1516190400">- po: import translations (rh #1481186)
- device: increase carrier wait time to 6 seconds (rh #1520826)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-9" date="1516363200">- ifcfg: don't forget master of ovs interfaces (rh #1519179)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-10" date="1516363201">- device: skip IP configuration phase for external devices (rh #1530288)
- platform: fix crash during route-get call (rh #1534721)</changelog>
  <changelog author="Lubomir Rintel &lt;lrintel@redhat.com&gt; - 1:1.10.2-11" date="1517572800">- ovs-interface: avoid starting ip configuration twice (rh #1540063)
- libnm-core: ensure alignment of team.config and other team properties (rh #1533830)
- nmcli: clear link-watchers before adding the new ones (rh #1533926)
- libnm-core: update team.runner description (rh #1533799)
- libnm-core: team: fix runner sys_prio default value (rh #1533810)
- libnm: avoid a symbol clash with json-glib (rh #1535905)
- libnm-core: team: add support to runner "random" (rh #1538699)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-12" date="1518091200">- ppp: don't start IPv6 configuration on the device (rh #1515829)
- device: avoid setting the IPv4 rp_filter (rh #1492472)
- nmcli: team: clear runner-tx-hash before adding new hashes (rh #1541922)</changelog>
  <changelog author="Francesco Giudici &lt;fgiudici@redhat.com&gt; - 1:1.10.2-13" date="1519128000">- dhcp: better handle DHCP outages and retry DHCP indefinitely (rh #1503587)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-14" date="1524484800">- manager: retry activating devices when the parent becomes managed (rh #1553595)
- manager: allow autoconnect-slaves to reconnect the same connection (rh #1548265)
- manager: fix starting teamd after service restart  (rh #1551958)</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1:1.10.2-15" date="1528286400">- device: start IP configuration when master carrier goes up (rh #1576254)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1:1.10.2-16" date="1529064000">- device: fix crash during reapply of connection settings (rh #1591631)</changelog>
</package>
<package pkgid="5ad95f7be10ac2d726db49eef99011238ec296914bba554ded5617a5e80c018c" name="adwaita-gtk2-theme" arch="ppc64le">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="10cc272367599c9baa0f1d963167640600e6c46fa3a93e80a45d544da3438111" name="anaconda" arch="ppc64le">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="fa9ac4f14101695165f5cfd45a8281941929ff23ee573426bd130916b18e69d5" name="anaconda" arch="src">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="bdcc71e1d710bd7e09d47c3f6a03d705961634ba0da69f9a62d4ee5a268d3bf8" name="anaconda-core" arch="ppc64le">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="ef02179cd92a664b6c417e43df02ec6305e84a00a1bb8a7701ef76d08ae07d36" name="anaconda-debuginfo" arch="ppc64le">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="3bbdac30cf3e143ae3b2aff1cd596945d3f18fea3cb176e16b04bf70ff18f074" name="anaconda-dracut" arch="ppc64le">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="4fb14aa233cf222be6361f8493d4f677f2f384db9cc9d215f85878d386a05e18" name="anaconda-gui" arch="ppc64le">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="da92e8876bc880544e60a79f5970e23a1901dbb1ecf4ffde3107e2da8de529be" name="anaconda-tui" arch="ppc64le">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="6dd0bf327ec053c910176e07b4b3d47b0561d297de1f2e41512eabc2016c46bd" name="anaconda-widgets" arch="ppc64le">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="10123fdffadefe207cfce5b67df1ea0dd79d1e97dac50597f43dc752c6f7bfa0" name="anaconda-widgets-devel" arch="ppc64le">
  <version epoch="0" ver="21.48.22.134" rel="3.el7a"/>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.128-1" date="1510747200">- Add support for the new 'mount' kickstart command (vpodzime)
  Resolves: rhbz#1450922</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.129-1" date="1512734400">- Update translations (ljanda)
  Resolves: rhbz#1480523</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.130-1" date="1515412800">- kickstart: use RHEL7_Firewall instead of F28_Firewall (dusty)
  Related: rhbz#1526450
- kickstart: support firewall --use-system-defaults (dusty)
  Resolves: rhbz#1526450
- Check payload is set before accessing its data (mkolman)
  Resolves: rhbz#1524785
- Fix bad bash '*' expansion when loading kernel modules (jkonecny)
  Resolves: rhbz#1519220</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.131-1" date="1518004800">- UI support for configuring certain mitigations (mkolman)
  Resolves: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.132-1" date="1518436800">- Performance spoke related CI fixes (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-1" date="1518609600">- Fix mitigation toggling with kickstart (mkolman)
  Related: rhbz#1534833</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.133-2" date="1518782400">- Don't display "Alternate Architectures" in product name (rvykydal)
  Resolves: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-2" date="1519041600">- Rebase to the latest 7.5 version (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="Radek Vykydal &lt;rvykydal@redhat.com&gt; - 21.48.22.134-3" date="1519128000">- Actually include the patch for product name (rvykydal)
  Related: rhbz#1544556</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 21.48.22.134-3.el7.centos" date="1523275200">- Apply debranding changes</changelog>
</package>
<package pkgid="973d393b573bb83ed745343344d857306ca29bba5374b2ae98a1f1987043b651" name="audispd-plugins" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="761e07e6c62ec2890e0f46e61b9c1d5d58496a119bbc4685796cc25597234547" name="audit" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="f1c55a0fdcd6263747b952a3aef11d1c9619cd53e1331cdd89114789ede0bfb4" name="audit" arch="src">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="c891bcd10260554e42752a9d0ba43b0e32ab0abc6155c7f36949b5d069591ea0" name="audit-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="5718933491e6c2abade5de2a9bccc725453fa81aaebab150b45f411bc566e69c" name="audit-libs" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="cbeb730f88fcd69da96ebe6f2919b5ee00938f168e578731cb35138dc2af7773" name="audit-libs-devel" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="23980e88cc9dc898ebb1c36b35ee175d885cdedf3295e5735eec91d460f0d799" name="audit-libs-python" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="d21ed9c87e6ce160b917446c76372dd177369238d998f75c5c4a772ecd0840a5" name="audit-libs-static" arch="ppc64le">
  <version epoch="0" ver="2.8.1" rel="3.el7_5.1"/>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.4-1" date="1490702400">resolves: #1367703 - auvirt wasn't supporting date keywords
resolves: #1396792 - augenrules includes files ending in regexp "rules"
resolves: #1406525 - ausearch with '--raw' parameter outputs garbage character</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.5-1" date="1491825600">resolves: #1437187 - audit rpm postinstall script points to non-existing file
resolves: #1437426 - Remove "--backlog_wait_time" from auditctl man page &amp; rules
resolves: #1437626 - PF_PACKET socket address will cause ausearch to segfault
resolves: #1438997 - SECCOMP records have wrong syscall</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-1" date="1492603200">resolves: #1443107 - disk full action and infinite loop in audit-remote</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-2" date="1495800000">resolves: #1455594 - Bad configuration keyword for audispd-remote.conf</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.6-3" date="1497268800">resolves: #1460110 - aureport does not report all anomalies</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.7.8-1" date="1505736000">resolves: #1406887 - auditd validate_email uses obsolete gethostbyname
resolves: #1448526 - aureport shows the wrong auid "-1"
resolves: #1475998 - python audit crash if when using AUSOURCE_FILE_POINTER
resolves: #1482121 - python audit crash dereferencing auparse_state_t le field</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-1" date="1507809600">resolves: #982154 - Can't find the "avc" event with the auvirt command
resolves: #1101605 - Ipv6 seems no working
resolves: #1399314 - Allow non-equality comparisons for uid and gid fields
resolves: #1455598 - Default port is wrong in audisp-remote.conf
resolves: #1476406 - Audit package rebase</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-2" date="1509969600">resolves: #1508965 - Need to rebuild rpm to remove static relocations</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3" date="1513080000">resolves: #1399314 - Allow non-equality comparisons for uid and gid fields</changelog>
  <changelog author="Steve Grubb &lt;sgrubb@redhat.com&gt; 2.8.1-3.el7_5.1" date="1532347200">resolves: #1607298 - auditd sometimes in failed state after boot</changelog>
</package>
<package pkgid="01251d98485334946869a8d04eae6335bd9cd7405fd65f75d8d929f30ae372bf" name="augeas" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="edcd1e74edb81cbf7038b55b08a38a178c233d424b612b3d6883e7561a4482fc" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="53744dad3e3fdcbda283a8833d2b693d71258fa8784b8624a693a51be527387a" name="augeas-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="f8bc24e79250c65ac988ee6668b51f183129988074ffd836ccb3ae0f0dab13eb" name="augeas-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="088f5496a3c479f290b53f747f83fcacf672f321f407e54594804516b033f5bf" name="augeas-libs" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="5.el7_5.1"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-14" date="1411041600">- Kdump: parse new options, EOL comments (RHBZ#1139298)
- Rsyslog: parse property filters and templates (RHBZ#1138402)
- Systemd: parse semicolons inside entry values (RHBZ#1139498)
- Systemd: parse environment variables where value is quoted (RHBZ#1138508)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-15" date="1411041601">- Remove man/augtool.1 patches, always create .1 during build (RHBZ#1143954)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-16" date="1411473600">- Iptables: parse /etc/sysconfig/iptables.save (RHBZ#1144651)
- Lvm: parse /etc/lvm/lvm.conf (RHBZ#1145495)
- Shadow: add lens (RHBZ#1145249)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.1.0-17" date="1417089600">- Device_map: parse all device.map files under /boot (RHBZ#1166582)</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscanoredhat.com&gt; - 1.4.0-5.el7_5.1" date="1522238400">- Fstab: allow leading whitespaces (RHBZ#1554927)</changelog>
</package>
<package pkgid="21e6d041539d84302a6990865b29febc88775fdf4dac743f8a0ce6f0440b0911" name="awscli" arch="noarch">
  <version epoch="0" ver="1.14.28" rel="5.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5.1" date="1527163200">- Fix unsupported max_bandwidth issue

  Resolves: rhbz#1581138</changelog>
</package>
<package pkgid="fae325f41e71eb94dc24752f327db8d6a30071d198cc5e25c257bdf30a1f006b" name="awscli" arch="src">
  <version epoch="0" ver="1.14.28" rel="5.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.63-1" date="1489579200">- Update to 1.11.63</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.90-1" date="1495540800">- Update to 1.11.90</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-1" date="1498046400">- Update to 1.11.109</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.109-2" date="1498046401">- Forgot to update</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.109-3" date="1501070400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.11.133-1" date="1502625600">- Update to 1.11.133</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-1" date="1516363200">- Update to 1.14.28
- Replace python-rsa with python-cryptography

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-4" date="1518004800">- Bundle python-colorama

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5" date="1518436800">- Append python-botocore and python-jmespath bundled directory to
  search path where needed

  Resolves: rhbz#1509434</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.14.28-5.1" date="1527163200">- Fix unsupported max_bandwidth issue

  Resolves: rhbz#1581138</changelog>
</package>
<package pkgid="f6d9e283c1672d99c64f54230f77f76acbb5434390789872d76bd606380dff5b" name="binutils" arch="ppc64le">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="61690adf9c07202d13fc06ec9449207034b454d945f7d726027bb46e705cd600" name="binutils" arch="src">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="5e9843e7c5ae69e118d5cd370c554fecdc7fe6eed9d9cb25646f13f44ba098a2" name="binutils-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="4f64c347dfa8cd7f281696b9ec43d324e736a7201912627d712671b70151f029" name="binutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.27" rel="28.base.el7_5.1"/>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-21.base" date="1510833600">- Prevent the PowerPC64 linker from triggering a seg-fault when discarding dynamic sections.
  (#1513014)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-22.base" date="1512993600">- Do not enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-23.base" date="1513684800">- Do not complain if the standards.info.gz file does not exist when uninstalling.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-24.base" date="1514894400">- Check for the existance of standards.info.gz before attempting to uninstall it.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-25.base" date="1514894401">- Remove man and info files not needed when building without documentation.
  (#1530339)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-26.base" date="1515067200">- Fix thinko in post-uninstall section.
  (#1520899)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; 2.27-27.base" date="1515672000">- Do enable relro by default for the PowerPC64 architecture.
  (#1523946)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base" date="1527249600">- Allow "lea foo@GOT, %reg" in PIC mode on the x86.
  (#1582602)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 2.27-28.base.0.0.hotfix.1.bz1582602" date="1527249601">- Hotfix build.</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; 2.27-28.base.1" date="1527595200">- Fix the N-V-R for z-stream release.</changelog>
</package>
<package pkgid="b616b7fe52ded417d5527e2edae57d29f4803c58ffca359c32933daf9b507529" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2018.2.22" rel="70.0.el7_5"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2015.2.6-72" date="1461585600">- Fixed a typo in a manual page (rhbz#1303960)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
</package>
<package pkgid="3e6afb8b84180d90238aed38b15767225aaba281a67caae95d78d1a0a685f053" name="ca-certificates" arch="src">
  <version epoch="0" ver="2018.2.22" rel="70.0.el7_5"/>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2015.2.6-72" date="1461585600">- Fixed a typo in a manual page (rhbz#1303960)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2016.2.6-73" date="1462881600">- Use sln, not ln, to avoid the dependency on coreutils (rhbz#1328586)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-71" date="1484654400">- Update to CKBI 2.11 from NSS 3.28.1 with legacy modifications.
- Use comments in extracted bundle files.
- Change packaging script to support empty legacy bundles.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-72" date="1489147200">- Changed the packaged bundle to use the flexible p11-kit-object-v1 file format,
  as a preparation to fix bugs in the interaction between p11-kit-trust and
  Mozilla applications, such as Firefox, Thunderbird etc.
- For CAs trusted by Mozilla, set attribute nss-mozilla-ca-policy: true
- Require p11-kit 0.23.5
- Added an utility to help with comparing output of the trust dump command.</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.11-73" date="1489147201">- No longer trust legacy CAs</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.14-71" date="1493380800">- Update to CKBI 2.14 from NSS 3.30.2</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.16-71" date="1506427200">- Update to CKBI 2.16 from NSS 3.32. In addition to removals/additions,
  Mozilla removed code signing trust from all CAs (rhbz#1472933)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.18-71" date="1509019200">- Update to CKBI 2.18 (pre-release snapshot)</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2017.2.20-71" date="1511956800">- Update to CKBI 2.20 from NSS 3.34.1</changelog>
  <changelog author="Kai Engert &lt;kaie@redhat.com&gt; - 2018.2.22-70.0" date="1521028800">- Update to CKBI 2.22 from NSS 3.35</changelog>
</package>
<package pkgid="c2f4e2955d036f9e19432061ef9b19cc1418937c6e44d20afff580489d3eb929" name="centos-release" arch="ppc64le">
  <version epoch="0" ver="7" rel="5.1804.1.el7.centos.p"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
</package>
<package pkgid="af142d4ceeda2a4be6847e69510b91e0b8b0a0a558ebff8c04b08a5293480e89" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.1.el7.centos.p"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
</package>
<package pkgid="033a74dd48068ee2995bac48a9bd67fa1962181f0e55e4763a6f4a04dfec1a7a" name="centos-release" arch="ppc64le">
  <version epoch="0" ver="7" rel="5.1804.2.el7.centos.p"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
</package>
<package pkgid="2a864c683bc891f09e93b12d7497ff94ca38e3c436906827455d3756f8e47f1f" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.2.el7.centos.p"/>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
</package>
<package pkgid="881b02ffa6f1d3690ffb142b59a87807d3578678c009b81bb943fb9f9114e2a9" name="centos-release" arch="ppc64le">
  <version epoch="0" ver="7" rel="5.1804.4.el7.centos.p"/>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
</package>
<package pkgid="f4ba48062ce5e84daca3b0c7e7df1c3b88cbd154f187367350b97c6315f65100" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.4.el7.centos.p"/>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
</package>
<package pkgid="300e2bf071ce4c5a5679eb95cae849d695807c7c5f4fd9631905eea441e00d77" name="centos-release" arch="ppc64le">
  <version epoch="0" ver="7" rel="5.1804.4.el7.centos.p9"/>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
</package>
<package pkgid="e94d9559733b4a4642c3a0ab4a4fea718d41438a177ec5c9c565d14ffb2964a9" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.4.el7.centos.p9"/>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1488196800">- armhfp: Added rootfs-expand and update-boot tools for armhfp</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1504094400">- Bump Release for 1708</changelog>
  <changelog author="Fabian Arrotin &lt;arrfab@centos.org&gt;" date="1514462400">- armhfp: Fixed the post scriptlet to detect correctly rpi2/rpi3 with 4.9 kernel</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1521633600">- armhfp: Update rootfs-expand to detect rootfs
- armhfp: Obsolete update-boot
- armhfp: Remove old versions of rootfs-expand</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1525435200">- armhfp: Require extlinux-bootloader now that update-boot was obsoleted</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1533211200">- Post Trans for contentdir</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533211201">- Sync version and fixes with centos-release
- Unified spec for all arches</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533297600">- Unified tarball for all arches, so it can be built from the same src.rpm</changelog>
  <changelog author="Pablo Greco &lt;pablo@fliagreco.com.ar&gt;" date="1533816000">- Enable ostree-remount in presets
- Include power9 as a separate ppc64le arch</changelog>
</package>
<package pkgid="bb0161c3a91bb9c95e0d4178e276bb8a79e7e7fde8dd8d35f0eb2d74e4784904" name="centos-release" arch="ppc64le">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.p.2"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="31bf0a705a961e01f0f847911c72415468b2e7d51bbd2288a8bea677a7e4b0e1" name="centos-release" arch="src">
  <version epoch="0" ver="7" rel="5.1804.el7.centos.p.2"/>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1405425600">- add CentOS-7 Debug rpm key</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1408622400">- add a yum var to route mirrorlist accurately
- add CentOS-fastrack repo
- Trim the CentOS-Debug-7 key
- rename the Debug repo to base-debug so yum-utils can consume easier</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1424174400">- Include the CR repo for upcoming 7.1 release ( and beyond )</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1426766400">- Bump Release for 1503 
- add ABRT specific content to os-release
- split redhat-release from centos-release</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427457600">- dont auto enable the initial-setup tui mode</changelog>
  <changelog author="Karanbir Singh &lt;kbsingh@centos.org&gt;" date="1427803200">- rework upstream communication
- re-establish redhat-release as a symlink from centos-release</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1448971200">- Bump Release for 1511
- Add CentOS-Media.repo and put CentOS-CR.repo in the
  tarball, then removed patch1000</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1480420800">- Bump Release for 1611</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1507032000">- Bump Release for 1708</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;" date="1523448000">- Bump Release for 1804</changelog>
</package>
<package pkgid="7e6fb9d6e5f19932fb7611a60228125bb7f574326aa13ef22e48ed0dc83b342f" name="certmonger" arch="ppc64le">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="3e019e0c7c0233856a5c03855138afe3cafced773c6467e334d2e11dfceab2bb" name="certmonger" arch="src">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="563c75eabc70bfa91e036383777afdcd7a193367281ffd2d4fc4b4ba8e71da1d" name="certmonger-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.78.4" rel="3.el7_5.1"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 0.75.13-2" date="1408622400">- Rebuild for rpm bug 1131960</changelog>
  <changelog author="Nalin Dahyabhai &lt;nalin@redhat.com&gt; 0.75.14-1" date="1409227200">- make pathname canonicalization slightly smarter, to handle ".." in
  locations (#1131758)
- updates to self-tests (#1144082)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-2" date="1416398400">- backport dogtag-submit: accept additional options to pass to the server when
  approving requests using agent creds (#1165155)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.75.14-3" date="1421150400">- backport change from git to correctly retrieve string values from DBus
  property interface replies (#1181022)</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.1-1" date="1434974400">- Resolves: #1140241 RFE: Add SCEP support to certmonger
- Resolves: #1148001 ipa-getcert killed by SIGABRT
- Resolves: #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.1</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.3-1" date="1437739200">- Resolves: #1244914 scep ca helper does not parse command line options
  correctly
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.3</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-1" date="1439208000">- Resolves: #1249753 challenge password not added in csr using start-tracking
- Resolves: #1250397 Remove certmonger rekey feature in 7.2
  - Remove rekey feature
- Related:  #1205756 Rebase certmonger to 0.77 or later
  - Update to upstream 0.78.4</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-2" date="1467374400">- Resolves: #1345755 Support for specifying IPA lightweight CA
  - Add 'issuer' request option for specifying issuer
  - Documentation: mark $CERTMONGER_CA_ISSUER as 0.79
  - Comment/whitespace fixup
  - ipa-submit: Retry without "ca" on OptionError
  - getcert: fix a potential out-of-bounds
  - Document the -X option in the ipa-submit man page
- Resolves: #1351052 certmonger build for RHEL 7.3 failure
  - Stop assuming RSA 512 works
  - Stop assuming RSA 512 works, part two
  - Fix a flakiness in the 028-dbus test</changelog>
  <changelog author="Jan Cholasta &lt;jcholast@redhat.com&gt; - 0.78.4-3" date="1473163200">- Resolves: #1367683 getcert request command fails to use Sub CA using -X
  argument
  - Fix CA option name for ipa cert-request</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 0.78.4-3.1" date="1522152000">- Use required DER encoding when setting CA basic constraint (#1560961)
- NSS 3.34 more strictly enforces length checking when verifying signatures
  (#1560960)</changelog>
</package>
<package pkgid="34353cf94747f4cee502ffbf13d108671fac7a1222edc32778607dbbe78e4524" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="0.7.9" rel="24.el7.centos.1"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-17" date="1511265600">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.7.9-24.el7_5.1" date="1526558400">- ci-Revert-azure-Fix-publishing-of-hostname.patch [bz#1568717]
- ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch [bz#1568717]
- ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch [bz#1578702]
- Resolves: bz#1568717
  (Add patch to bounce NICs in Azure/update DNS [rhel-7.5.z])
- Resolves: bz#1578702
  (cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z])</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.7.9-24.el7_5.1" date="1529928000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="ae01f7313886f66db7bd5b35855c9acf836d0bd56895b48bf9300441ebae9c8e" name="cloud-init" arch="src">
  <version epoch="0" ver="0.7.9" rel="24.el7.centos.1"/>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-17" date="1511265600">- Correctly render DNS and DOMAIN for sysconfig
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-18" date="1511524800">- Start the cloud-init init local service after the dbus socket is created
  so that the hostnamectl command works.
  Resolves: rhbz#1450521</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-19" date="1512043200">- sysconfig: Fix rendering of default gateway for ipv6
  Resolves: rhbz#1492726</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-20" date="1513512000">- sysconfig: Correct rendering for dhcp on ipv6
  Resolves: rhbz#1519271</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-21" date="1516017600">- sysconfig: Fix a potential traceback introduced in the
  0.7.9-17 build
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-22" date="1516017601">- Apply patch from -21
  Resolves: rhbz#1489270</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-23" date="1516017602">- Fix a bug tha caused cloud-init to fail as a result of trying
  to rename bonds.
  Resolves: rhbz#1512247</changelog>
  <changelog author="Ryan McCabe &lt;rmccabe@redhat.com&gt; 0.7.9-24" date="1518523200">- Set DHCP_HOSTNAME on Azure to allow for the hostname to be
  published correctly when bouncing the network.
  Resolves: rhbz#1434109</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 0.7.9-24.el7_5.1" date="1526558400">- ci-Revert-azure-Fix-publishing-of-hostname.patch [bz#1568717]
- ci-DataSourceAzure.py-use-hostnamectl-to-set-hostname.patch [bz#1568717]
- ci-sysconfig-Don-t-disable-IPV6_AUTOCONF.patch [bz#1578702]
- Resolves: bz#1568717
  (Add patch to bounce NICs in Azure/update DNS [rhel-7.5.z])
- Resolves: bz#1578702
  (cloud-init-0.7.9-9.el7_4.6 breaks IPv4/IPv6 dual-stack EC2 instances in AWS [rhel-7.5.z])</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.7.9-24.el7_5.1" date="1529928000">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="b0e7ce3d6f914dff394c4d24a1a0f1fcf4fd891b0ce8f37a387678ce1d50dd29" name="cmocka" arch="src">
  <version epoch="0" ver="1.1.1" rel="0.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.0-1" date="1474459200">- Update to version 1.1.0
    * Added support to catch multiple exceptions
    * Added support to verify call ordering
    * Added support to pass initial data to test cases
    * Added will_return_maybe() for ignoring mock returns
    * Added subtests for groups using TAP output
    * Added support to write multiple XML files for groups
    * Improved documentation
    * Fixed XML output generataion
    * Fixed Windows builds with VS2015</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.1-0" date="1491566400">- Update to version 1.1.1</changelog>
</package>
<package pkgid="d931b02f3d2a40b9b287bd1372cd87905105896f6edfbe689bd5277a205dbc89" name="cmocka-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.1" rel="0.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.0-1" date="1474459200">- Update to version 1.1.0
    * Added support to catch multiple exceptions
    * Added support to verify call ordering
    * Added support to pass initial data to test cases
    * Added will_return_maybe() for ignoring mock returns
    * Added subtests for groups using TAP output
    * Added support to write multiple XML files for groups
    * Improved documentation
    * Fixed XML output generataion
    * Fixed Windows builds with VS2015</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.1-0" date="1491566400">- Update to version 1.1.1</changelog>
</package>
<package pkgid="9df508a62c0dda16f49bc64c7c23e6e6e012ec76b46ffffee236689b1b964c50" name="control-center" arch="ppc64le">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="eb3d7e5722fe19686b3aeb6a6e10903e35bf334f2b9533aa8074b88933f3fe86" name="control-center" arch="src">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="ad5b6e5c5b2dddd6b3b7f71c9fcee107413bc51d3337c9fd2b9e08d1fe852d7f" name="control-center-debuginfo" arch="ppc64le">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="f1c39d6774a66a59ded8455b45f5f93b1b27580e46e487bf4daab2ca369ba11e" name="control-center-filesystem" arch="ppc64le">
  <version epoch="1" ver="3.26.2" rel="9.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.1-3" date="1509364800">- network/eap-method-tls: Don't require a private key password
- Resolves: #1415760</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1:3.26.2-1" date="1509537600">- Update to 3.26.2
- Related: #1481407</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 1:3.26.2-2" date="1510747200">- Fix display arrangement widget
- Resolves: #1512448</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1:3.26.2-3" date="1513684800">- Don't show the supply level bar by default
- Resolves: #1525062</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 1:3.26.2-4" date="1518004800">- Handle multiple tablet devices sharing the same event node
- Resolves: #1528356</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-5" date="1518523200">- Fix crash with root user
  Resolves: #1544369</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-6" date="1518782400">+ control-center-3.26.2-6
- Fix Clone MAC not being saved in Ethernet device properties
- Resolves: #1467295</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-7" date="1519128000">+ control-center-3.26.2-7
- Allow empty IPv6 gateway
- Resolves: #1467308</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.2-8" date="1519128001">+ control-center-3.26.2-8
- Fix Wi-Fi networks not getting updated
- Show "Wi-Fi disabled" page when Wi-Fi is disabled
- Resolves: #1545713</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-9" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568701</changelog>
</package>
<package pkgid="5465c35cf1ac3be438c3b6fba8d976509436f5aeb6d3fa58931c0e072354d41c" name="coolkey" arch="ppc64le">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="4d54900aeeda521c298544efe1679b18f6740cbc4890a99f220ea8ef2597c020" name="coolkey" arch="src">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="f79c8ef8c475c558025dabc410c008423ee3d3e163298449a8653cfad524010f" name="coolkey-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="7c81e97d520c7bccbc102ba4487236f38cf108f2dcb19e74d98b6bed634328d3" name="coolkey-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.0" rel="37.51.el7_5"/>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-30" date="1436184000">- Add pk11-kit modules file</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-31" date="1436184001">- fix requires as identified in rpmdiff</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-32" date="1436184002">- fix coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-33" date="1436184003">- fix more coverity issues in p15 patch</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-34" date="1465819200">- recognize up to 32 keys and certs in coolkeys. (can go up to 62 with just #define changes)
- own our cache file.
- verify we are using the correct mechanisms</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-35" date="1467288000">- include sleep on unknown reader errors.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-36" date="1480593600">- recognize up to 10 cac and PIV certs rather than 3</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37" date="1489492800">- get Cardos 5.3 cards working properly</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.50" date="1524484800">- support cac alt tokens which don't have a cert is slot 0, don't have
  a CCC, and uses a ACA.</changelog>
  <changelog author="Robert Relyea &lt;rrelyea@redhat.com&gt; - 1.1.0-37.51" date="1529928000">- Fix regression in alt token patch that prevented blank cards from working
  in ESC.</changelog>
</package>
<package pkgid="86a6a6e8b8cf15b551cb1e0b5bec7c679c9cc30217a220c7ce87afc92796febe" name="cpp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="c6efe021f7b94a63893d4698c8a8b8cfd74f2777ccf31767c1e7a37878beaf64" name="ctdb" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="b1a48dc1162c2a6f5a7285dff510dec9fd5379bd12251db17cf177a077930ea4" name="ctdb-tests" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="42d18c1297d39acf6628572b9125c21dc50ba8050c64d7b4ac76c635a574a866" name="debugmode" arch="ppc64le">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="3256e46b562ad7e9366dc35995cba31a3aa5abfd87fdec2b1ca8f71e26a0d2a5" name="device-mapper-multipath" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="d5282dadd960a57c012b78892d7baaab2dc9bc1a9d8f1f5c376e258be42fc06f" name="device-mapper-multipath" arch="src">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="e1460459dda1d38c5cee1c9671206572bcd83447f04ccb4a5da9b9b8cd446134" name="device-mapper-multipath-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="77fced9f8e8042d9bdd4301755b0d23badd9646049972f86c04c77b41e844f8b" name="device-mapper-multipath-devel" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="1eb886ebdd66d2177106f4cebbd183f423d63c12526925b3b7c4f8d13f882f24" name="device-mapper-multipath-libs" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="de161053760a7cd8ff40a30b9a38e1663d0c1013d07c729c6df8eb2da2d462a9" name="device-mapper-multipath-sysvinit" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="9cb154cc12dc25ce2ca059cb1d671ca9a08f0c53d231c6cbafd42e8a381cce3c" name="dhclient" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="c51452b7cc5722f833172bc0906252f61b7fe6b0f93ad656b1be910b4f2997ea" name="dhcp" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1e9c22683d04da930381aa15d479cfe95f315584dbbd7ddf166e5d5976a8de7e" name="dhcp" arch="src">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4fb513c4f7e5b4f29871c4214568aa6ebcb74712dfacdfbca2a3a0a00cd82ee8" name="dhcp-common" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5f380b21e677e455108a9dc01e0a6fb32a828f9cbf103b5a24537ea0c2cf5c25" name="dhcp-debuginfo" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="40ed17532a86e1af92fadc505a4804b2044cbc7db8d7eab7082fe7bb1cad3b67" name="dhcp-devel" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ba4156525bd94ea63650648d706838a9ef8038a5bf3c8242d96ea3dae771b97b" name="dhcp-libs" arch="ppc64le">
  <version epoch="12" ver="4.2.5" rel="68.el7.centos.1"/>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-60" date="1502884800">- Resolves: #1299562 - listen on DDNS port on demand only</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-61" date="1502884801">- Resolves: #1396985 - Addes addtional HMAC TSIG algorithms to DDNS</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-62" date="1504094400">- Resolves: #1394727 - Add code to support standard ddns updates</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-63" date="1505908800">- Resolves: #1490782 - Do not override HOSTNAME in client script</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-64" date="1506945600">- Resolves: #1497630 - failover hangs with both potential-conflict</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-65" date="1512648000">- Resolves: #1519363 - omapi: Close orphaned sockets.</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-67" date="1519819200">- Resolves #1549998 :CVE-2018-5732  Avoid buffer overflow in options parser</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68" date="1519819201">- Resolves: #1549999 - CVE-2018-5733  Avoid buffer overflow reference counter</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 12:4.2.5-68.1" date="1524571200">- Resolves: #1570898 - Fix CVE-2018-1111: Do not parse backslash as escape character</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.2.5-68.el7.centos.1" date="1526385600">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="8289a12cb75a2db05f2b14fa843150728acda5fbc53dd811c01135b9c1c86f7f" name="dracut" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="07c62a692dd2821077f18492d6a0daeab0cc551384affff7f763926cadb53e47" name="dracut" arch="src">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="c5e7858dd72c96bfbaf46333d962fee6dff4b2c1de386e0e6bfe23d4663194c5" name="dracut-caps" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="ac8fd8cefe65887bde4bf84855e116f8f0e1e63b1b54dccebc88afdcad03036b" name="dracut-config-generic" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="481e301375b22e4a4bee0af77eb68232b8e5283e443d7e3a790a675ad5c708db" name="dracut-config-rescue" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="577702510453d716d799e5d92d00bbccf0311a693a88e81e168f7343b1269802" name="dracut-debuginfo" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="212835d862942bd95e1f8d3df9367d05f4e791e6b83691cee4f5b13e54a45459" name="dracut-fips" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="3e40671d81f1205eeee27ad3fff241eef05ed1b4a2b79052ae9f49cccef1734a" name="dracut-fips-aesni" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="b1fe45c218509876fede8f4487ead0673426b3b5f816ce634316aaaad60fc51c" name="dracut-network" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="16ff2865f1fbbf21befec4cd65720cc3fefa45404c01da828dbfd2f5b01758c9" name="dracut-tools" arch="ppc64le">
  <version epoch="0" ver="033" rel="535.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-513" date="1509624000">- spec: add missing modules
- add 90multipath-hostonly module
Resolves: #1457311
- Add NTFS support to 90dmsquash-live module
Resolves: #1449410
- dracut.sh: gather host_modalias when "--no-hostonly-default-device" is set
- rootfs-block/module-setup.sh: check root_dev in cmdline_rootfs()
- dracut.sh: introduce "--no-hostonly-default-device" argument
Resolves: #1483838
- 10i18n/parse-i18n.sh: parse rd.vconsole and rd.locale
Resolves: #1479325
- dracut.cmdline: remove extra ":" from ip= doc
Resolves: #1469997
- Try BOOT_IMAGE and fallback to vmlinuz-${KERNEL}
- fips: honor $BOOT_IMAGE variable for HMAC check of the kernel
Resolves: #1415032</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-520" date="1509710400">- network/ifup: don't arping for point-to-point connections
Resolves: #1477339
- network: Only bring up wired network interfaces
Resolves: #1480246
- dracut.sh: source dracut-version.sh earlier than dracut-functions.sh
Resolves: #1490777
- Fix MTU on bond interface.
- add 'mtu' parameter for bond options
Resolves: #1494265
- fcoe: Allow more time for the bnx2x link negotiation before brining up fcoe interfaces.
Resolves: #1378910
- lvm_scan.sh: use -K when calling lvchange
Resolves: #1489841</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-522" date="1512734400">- for_each_host_xx() function should indicate the empty case
Resolves: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-523" date="1513166400">- dracut.sh: remove quotes from install_items and install_optional_items
Related: #1520721</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-525" date="1513598400">- Support Microcode Updates for AMD CPU Family 0x17
Resolves: #1476039</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 033-526" date="1513598401">- 01fips: Fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-527" date="1514980800">- 01fips: Properly fix creating path to .hmac of kernel based on BOOT_IMAGE
Resolves: #1415032</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-534" date="1517486400">- base/dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-"
- base/dracut-lib.sh: remove bashism
- Align dev_unit_name() with systemd's function.
- dracut-lib.sh:dev_unit_name(): use systemd-escape, if available
Resolves: #1306640
- 90dmsquash-live-ntfs: fix depends()
- 90dmsquash-live: we don't have find_binary inside initramdisk
- dracut: Ajusting variables name for --include
Resolves: #1489882</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535" date="1519041600">- 90lvm: always add dm-snapshot
Resolves: #1546577</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 033-535.1" date="1528891200">- dracut.sh: workaround broken read from /proc/modules
Resolves: #1578222</changelog>
</package>
<package pkgid="4ff7275092a3e3750948503900bd0bdea22112374f2f5d6458d87286739856f0" name="e2fsprogs" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="c914d8a600d2c6216169f535caaa92c105a7a93b53068cb91d7da525b33117c3" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="aac131e9fefcb59d5c666e1ace11099289a26d7839372d94ccb9eb5ccf708992" name="e2fsprogs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="ae499af0498e045b12017b80ede8ac55549c1bfb1dee3cb2546b86ae5055090f" name="e2fsprogs-devel" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="dabb496c4c538d0e328c7cd9075384c72c7619ccd25d60cdeaa4474db3bcf16d" name="e2fsprogs-libs" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="ade276b02cb56ba52449bb44b3c81bff45294f34398e5e3ebeba7b95aefbe849" name="e2fsprogs-static" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="3420406662aab8f4006efc05d9081d11e6a75a79fa3d602e0ab3833bf37844ac" name="emacs-git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="2c9535f317f556cefff66c7de42b61b4e777a4bac1c55b98d2d31bb5aeb38837" name="emacs-git-el" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="98bff219a137771c83f5b76ba7978af8fe3681bde2139c9279afd2f44f911610" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="85a0c7998712d1962b00915eb9a977ac474fc93c2f84b689bfb3d6bb9367a5d4" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="56f4fb9f1863448eb4dab54609a814ab470a73d817b9bd33a98a552b223f8c94" name="fence-agents-all" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="4aea5e1ebba9ab4c2c775ad8492f2af664bfa56c01d595a6ccd8fdc8195be472" name="fence-agents-all" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="67c1a928c65208349cff266baa0f992215ed653a849b1694514f6dee889eb1e4" name="fence-agents-amt-ws" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="835ba01282b4b122650374f53b242ab6153c32564ab10c00b0cf6dbd3052e150" name="fence-agents-amt-ws" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="d94b4e4c9f8ab00475473c9083b073745b95e9832b8ba00b5118211e821d27c7" name="fence-agents-apc" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="31acd836474a2ffedc71b9dddf7b1e8db9f01177e72bbc0d030d5ba27be8e27a" name="fence-agents-apc" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="cc576cce70539874e48c74f7b2d2f0d37575a07b1900c2c98746ba07b84e26cd" name="fence-agents-apc-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="15ea085cfdaeae5abd490f3397fdba39e5b0c3732ea68cfb8b18fa7ee386eaf1" name="fence-agents-apc-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="ddd2c9af3bdc902440c91c973f220ca2c6c12eedeb17dad8c3ecb4b8745e42c2" name="fence-agents-aws" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="6324cf56d140c9d35554630069f79efe61606f252df4bac9a6234a83308f48c8" name="fence-agents-aws" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="220e486b01129acb525b33470394d8c147d7de9a240aa48b6431b9cf54745da6" name="fence-agents-azure-arm" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="1d0152c457fb59f941ebc95c5ca8369884be1c13d478d42d2e0b45c747042de3" name="fence-agents-azure-arm" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="4a731d8d72edcf12aac3429ba0fa27028b3889ae1d109eaef09206896dae496d" name="fence-agents-bladecenter" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="2c1c21c0079634484b0af3ef8631c350d87e431d1f5a2c744c6069f074b278ef" name="fence-agents-bladecenter" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="daff976c623c1081bf3e1975e998ef869122b2f4088d7c9f5f6248cb6ede8699" name="fence-agents-brocade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="c2896c99b4d1d29e968913774c9a613d088275b65663bb0f5d8e3274e1e8cc83" name="fence-agents-brocade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="8ef6af14acdd31a7ba15d36f563c1e76e698ac6d033cd7fbb35ae5ca6968c886" name="fence-agents-cisco-mds" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="6ff044d7d8d6406471c3f83c7e293fff3d9c54b8e9188ad22c4ef6f3eb8a14b1" name="fence-agents-cisco-mds" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="6cad0668c98fede6e1eb8bdffe04d826566fa387f40698369fb112dac3450d72" name="fence-agents-cisco-ucs" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="40e25075d692d075ae563826830408da447b92b8d02e80db4cec3737a03b00ec" name="fence-agents-cisco-ucs" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="6efbb2f999bcb9594d74c63ce7defba4959cd2b6aad6f9fc691ad4e64264014f" name="fence-agents-common" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="9b9b158499d9d36ab414c0dac66517a2ffcbafa355a016ab7253dda745a496a5" name="fence-agents-common" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="bfb6f32c222895cfcc5f4fcff8b75426e7342e5bc153ba822661656d87c2cc5f" name="fence-agents-compute" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="48f5f08be500a70a0dcaafabe3a4384ecfc71edca1ce7c48e3506db1df3ad6fd" name="fence-agents-compute" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="42f6679d2cf710d01fec407726dd3f627cedff07d2e110f0b5a8eb98db2ba160" name="fence-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="9edeb4e23676d3bed15df4955906e91bf6ccbf7da1c1cd59a13459f18bec86ef" name="fence-agents-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="ae78e7ee36e60540bc7661b87eba67db87f48e63ffa44cd04d7ede63bd30f3d1" name="fence-agents-drac5" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="21a68d36d0f755be5ead40fc686f455db8fbb1c38ddcd4bfd1ce8fdad554234e" name="fence-agents-drac5" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="25f6ce09df95106f5cb3ce7ae45806f6da277920da3f154e2b66cbc3d26a7912" name="fence-agents-eaton-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="8292a59d21517d60307fd32f55d447766d7dac305e3949a8a4e2688838b5a7f7" name="fence-agents-eaton-snmp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="c1a9825ab521c68f77aa9bc30e6dc368902172743092208162cef05b19f98762" name="fence-agents-emerson" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="8a210c57f8e370b2bd0797ae3bb9eca72a5348c3de5db226b706886e01e8132b" name="fence-agents-emerson" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="27ac132f73c0f84484504486f16c405fd6e76c94e6cc84024c12363b296dddcc" name="fence-agents-eps" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="e74dae04fc97f011831bb45afa9a25f2defca1c80c9f21f85a5c3cc75a7bd516" name="fence-agents-eps" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="42040948fb159c38d34c246f2bc063549cb09ba0dffaf4ce1ea517789dff77c3" name="fence-agents-heuristics-ping" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="5b45b9e0d39b999509e6f7ad94dfc560b77318d7e24d774c7ffc9d45d4eb7644" name="fence-agents-heuristics-ping" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="95ace03881603d7d71b224ea7c59f11ce8c9f28323422f254da3bf6c826360f3" name="fence-agents-hpblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="8a1594ca700fb14dccefbe13a47899930491af25b8475fd04f1137e7ed8d816c" name="fence-agents-hpblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="629fcd51a0409721326bbb5c158e8cee95113a995cb5ab903a5351f9738c41b1" name="fence-agents-ibmblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="1c7fbeb187b5a53fdef8cbb2e4bc23ae7683d9436769066aeff0622fd8bd3155" name="fence-agents-ibmblade" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="ab6762dd292b060e2e09962f886146fa51e4dca229598e3d506fa76260dca856" name="fence-agents-ifmib" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="dc96632b59cfad5169d99eef1a9f584e3faa7318c1950e2426c3d87f9e2c85b9" name="fence-agents-ifmib" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="f86a5ce14dcc741c3ea7be7c4f74fbb7e7476cd2b6869c68226a04ba294664ff" name="fence-agents-ilo-moonshot" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="1f3148691543e9f688ca195e194d42e39021994cca780726cd416d9525a5ccab" name="fence-agents-ilo-moonshot" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="ac9d344a95a46745e861bd992e9c28344ff376d4f34cd362783896c0fc7c2942" name="fence-agents-ilo-mp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="b581639f07169f99a36034ea3b9ad4a157f3e15d20dc5ffabd93d5b109a34642" name="fence-agents-ilo-mp" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="d1c8a30ab27d65e1af8aa5367276755c5eec12ef7fc102c7be90dc27c06ccdaa" name="fence-agents-ilo-ssh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="2fe63af4a19a676e83f4b3ee06e81fb8243444a5bc6870183e290741a09ab3d2" name="fence-agents-ilo-ssh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="47adba8735fe4ce22c13cb8592165ed5ebf08f810f2850f7d7f28506090bc160" name="fence-agents-ilo2" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="89305cd7d385f7dba76a4138455ffa0b7a5f7928c7fecf7b30c966b5f528f7ca" name="fence-agents-ilo2" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="668cff0987f7385a4c025e4e8133d0fd146a6d6bd3c60ec34e1619c1d907c0e6" name="fence-agents-intelmodular" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="fccb99f0d9b814e31a6ffe0860118bf659eb81a9aa03711a83d6b8c3fab9e21a" name="fence-agents-intelmodular" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="d974f3631e2cc508aca073385e718016104893ab6a128235ee21c84c4d9ec24c" name="fence-agents-ipdu" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="58f741ed933d43ed0b29e1882e0a08197f68a4153ba79a127d5d73887a818220" name="fence-agents-ipdu" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="9fbe6180a86b76eee000905bf4740e4a3593ea65bca60af1b5b9a41513b0694a" name="fence-agents-ipmilan" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="8b05dc6a88678b3933897e8ecda9f3916f0778c957125f8cefb7013e4322a2a0" name="fence-agents-ipmilan" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="e74feccf0ca9f132b12bcdc824c00f7f72870b230fa973ce3cac7a0414cda6eb" name="fence-agents-kdump" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="e80f033537889dad6107b033e350dee582df2229f7fe6e1cea8880e2f9618c3d" name="fence-agents-kdump" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="67e81f9fd3cf96c57ef31780c4328a8cd1840ffe3c88cab73a9e9c0854be2697" name="fence-agents-lpar" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="3c1df26d8deea5358976b22b3a832cf1f2fcd3c0ec94d40881f5ec3b7d9421a3" name="fence-agents-lpar" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="18df9bc2a325ee99c7171f1feb8c4fd058438d6c0632c227ab2fa78620460af5" name="fence-agents-mpath" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="e5ca6de8c8b55831ea4313d88ed10daa9190639d78b44ce7873d0dd1588589b1" name="fence-agents-mpath" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="a28caa69b8e1346a860891cd7846545d3fd451b914e7f858753ff56fc58783d5" name="fence-agents-rhevm" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="7974bd5d53ca499492e2cd1e6f37a6a5e34ecedc41de501dc16782339f6e16d2" name="fence-agents-rhevm" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="668ee8881312d5ffa9b08f6ff36cb9076b231a1eab6eaea908f2895e650bfd39" name="fence-agents-rsa" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="31159c0e3b195270a3a3f72f444b6f0e1442a137482fe1774e265d52d7fdf15d" name="fence-agents-rsa" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="d86c78a02a206b0ee39d8c419f715811bebd5dd3a98789f315f50817721528a0" name="fence-agents-rsb" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="d2b89cd955716b18d7fd7392cafdaca880ba305ecdf2971d44a0389068d808dd" name="fence-agents-rsb" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="30d66dd27f87512f265ac23d2b9d09366e498c8a40350f8fa59d392c8cfa1b64" name="fence-agents-sbd" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="1841a0b4abc871978b5549fd6272fe86f6902cfae32356bfc8f11c8970835e3c" name="fence-agents-sbd" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="ad4379825704b923bb8be5c6b89a0e75f2ee1275329789c1c7d3010e4b9e19f3" name="fence-agents-scsi" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="cf72b123943a6fa9c3ab28be0a6b5c645f3e72267643fbc61ccaca1470bb994d" name="fence-agents-scsi" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="c706ddadac56341abd705373aa0faad12146c8fd9aaa8e4200d05c9d86c40e68" name="fence-agents-virsh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f45847d70dcec732b357166b7ab1ce955ca97808218a12cbcd628533f5bd9f0e" name="fence-agents-virsh" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="cd3b8d467609b8951cab1c4c3f6750d40c67c65cd42405ef06a99a26ba3afcf6" name="fence-agents-vmware-rest" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f676557927c44f12e337351a314eaee5de52f556c7bb9dbf944dbcfde4c7d92d" name="fence-agents-vmware-rest" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="b98b017f9b151bbbec8a637a54abc13556bffc7530ac12fce0f184c59bafb5db" name="fence-agents-vmware-soap" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="f63dc729072307d58f8bd1b682b6351cdd5910ff0754ca035a9f3192706faf26" name="fence-agents-vmware-soap" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="c33d087d15e974e3b89766efba3abd751622882442ef309a4249fdc49efdef42" name="fence-agents-wti" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.2"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-78" date="1509537600">- fence_heuristics_ping: new fence agent
  Resolves: rhbz#1476401</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
</package>
<package pkgid="d67c9cbff43ae139bf81782738767d28ebe6dd018c00cdad7f27927d0664bcf0" name="fence-agents-wti" arch="ppc64le">
  <version epoch="0" ver="4.0.11" rel="86.el7_5.3"/>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-80" date="1509710400">- fence_ipmilan: fix default method inconsistency (help/man page)
  Resolves: rhbz#1465436</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-81" date="1510056000">- common: add selinux-policy-targeted dependency
  Resolves: rhbz#1509327</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-82" date="1511870400">- fence_vmware_rest: new fence agent
  Resolves: rhbz#1396050</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-83" date="1515672000">- fence_compute/fence_evacuate: add support for keystone v3 authentication
  Resolves: rhbz#1533170
- fence_ilo3: default to onoff
  Resolves: rhbz#1519370</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-84" date="1516622400">- fence_azure_arm: new fence agent
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-85" date="1517918400">- fence_aws: add python-boto3 dependency
  Resolves: rhbz#1540700</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86" date="1518004800">- fence-agents-all: remove fence-agents-aws and fence-agents-azure-arm
  dependencies
  Resolves: rhbz#1476009</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.1" date="1523448000">- fence_azure_arm: add network-fencing
  Resolves: rhbz#1565670
- fence_compute/fence_evacuate: fix parameters
  Resolves: rhbz#1565701</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.2" date="1523534400">- fence_azure_arm: fix subscriptionId from metadata
  Resolves: rhbz#1566632</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 4.0.11-86.3" date="1531742400">- fence_evacuate: fix evacuable tag mix issue
  Resolves: rhbz#1600602</changelog>
</package>
<package pkgid="0d932d612da2b40a6ab1ac1a30600ee9051f511bc55ff7a8a518dc1ee08d214b" name="firefox" arch="ppc64le">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="17b3368ce58a39a45df878d9512133da782b984923c8fa5fee4c8b0a083846c2" name="firefox" arch="src">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0166216ab3f2a7baf38dd99bd495b51101e989d5aabd6297ebbb8409f618bd89" name="firefox-debuginfo" arch="ppc64le">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-3" date="1501761600">- Update to 52.3.0 ESR (b2)
- Require correct nss version</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-1" date="1506340800">- Update to 52.4.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1510228800">- Update to 52.5.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.1-1" date="1511956800">- Update to 52.5.1 ESR</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 52.6.1-2" date="1516276800">- Update to 52.6.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1520510400">- Update to 52.7.0 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.2-1" date="1521201600">- Update to 52.7.2 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.3-1" date="1522238400">- Update to 52.7.3 ESR</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1525867200">- Update to 52.8.0 ESR</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.8.0-1" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="4c6dbb9c138e9e7b07bbb2322f4a4e6d3db59aa9eb7502d99d75dbbdd1574c77" name="freeradius" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="7c5923b2a233975bef286b840fec9a285ef65744d73bdc8f8d9bfc8dabfd236e" name="freeradius" arch="src">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="6fb303278e6f15b0ebb6d6d16d3c25f66fdcf45628ce7f5ea749527e5b055168" name="freeradius-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="9279fcb6bb29cb9fb5a44de972df5fb43f76845f101f56d5f15bd51dfbd2dcc0" name="freeradius-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="6ed2221275500360e447690dc21b6404ea496246f1c10854bba3fa7a77cb7386" name="freeradius-doc" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="cc586c8dcc6081b82e486ce7a99ca226d043ba2d59c4df34c1d6fae079c68842" name="freeradius-krb5" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="36d1acc48263a4b01912d14a185273f18145e493c2e969430f292a638d466791" name="freeradius-ldap" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="f1c00e758d0885ee33489ed0d9ead689e660ed19f335feff153c90b5c1cf74f0" name="freeradius-mysql" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="62bbd6b0b43dcbce34cf9fd71d6ec66226f0d5bcf2606ff9d672255188628942" name="freeradius-perl" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="0d9d1b67f14d376cfff3fe900aaaeb04d93acaa9d287e0cc5235f4f2efef14c6" name="freeradius-postgresql" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="11233ba6bc50db9d6c1fb28fa22222bce26e8ccabf0ee78287acf6cfd37ac2e1" name="freeradius-python" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="7a3eb58d0e3ab77dc3ed50b70e22a585f474553c6bdf37e850f4df7155b8fcb9" name="freeradius-sqlite" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="9547d25af4b28778c52452ee42ff493d33bec6b92675a3709613d0163bc16bfb" name="freeradius-unixODBC" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="e5605849f9bd0cc6a1fb7ab1ddf8032ebaa915aaac37856b69402a193cc1754f" name="freeradius-utils" arch="ppc64le">
  <version epoch="0" ver="3.0.13" rel="9.el7_5"/>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.12-2" date="1487678400">- Do not fail logrotate if radiusd is not running.
  Resolves: Bug#1365226 error running non-shared postrotate script for
                        /var/log/radius/radius.log of
                        '/var/log/radius/radius.log '
- Fix output to log file specified with -l option.
  Resolves: Bug#1421207 radiusd does not work with log file specified by -l
                        option
- Fix long hostnames interpreted as IP addresses.
  Resolves: Bug#1420359 radclient does not detect 4. level and higher domain
                        name as a domain name
- Avoid clashes with libtool library symbols.
  Resolves: Bug#1391960 undefined symbol: get_vtable in
                        /usr/lib64/libtdsodbc.so.0 with freeradius-unixODBC
- Remove mentions of Auth-Type = System from docs.
  Resolves: Bug#1420293 Freeradius does not know Auth-Type = System
- Improve ip/v4/v6/addr documentation.
  Resolves: Bug#1179736 add description for ipaddr = hostname from DNS with A
                        and AAAA entries</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-1" date="1488888000">- Upgrade to upstream v3.0.13 release.
  See upstream ChangeLog for details (in freeradius-doc subpackage).
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
  Resolves: Bug#1329181 freeradius-python fix libpython2.7.so dependency at
                        compile time
  Resolves: Bug#1425869 Radiusd does not trigger modules.sql.fail trap if it
                        can't connect to mysql server
  Resolves: Bug#1427829 Stack overflow when passing bare IPv6 to radclient</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-2" date="1490270400">- Fix some issues found with static analyzers.
  Resolves: Bug#1432103 FreeRADIUS fails covscan checks
- Revert rlm_eap_tnc removal, because the tncfhh package is still in RHEL.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-3" date="1490788800">- Explicitly disable rlm_cache_memcached to avoid error when the module's
  dependencies are installed, and it is built, but not packaged.
  Related:  Bug#1202751 Rebase FreeRADIUS to 3.0.12 or later minor release
- Prevent segfaults by adding a missing handling of connection errors in
  rlm_ldap.
  Resolves: Bug#1437409 [abrt] freeradius: radiusd killed by SIGSEGV
- Make radtest use Cleartext-Password for EAP, fixing its support for eap-md5.
  Resolves: Bug#1436619 radtest does not work with eap-md5</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-4" date="1496750400">- Disable internal OpenSSL cache.
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass
- Check sizeof(*packet), not sizeof(packet) in EAP-PWD
  Resolves: Bug#1459073 Potential buffer overflow in FreeRADIUS EAP-PWD
- Parse port as well as address for dhcpclient destination
  Resolves: Bug#1457825 dhcpclient does no accept IP:PORT</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-5" date="1496750401">- Refer to correct package version in configuration comments for Bug#1458746
  (CVE-2017-9148) fix.
  Related: Bug#1458746  CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-6" date="1497528000">- Avoid race condition when creating session cache file
  Resolves: Bug#1458746 CVE-2017-9148 freeradius: TLS resumption
                        authentication bypass</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-7" date="1499774400">- Resolves: Bug#1469408 CVE-2017-10978 freeradius: Out-of-bounds read/write due
                        to improper output buffer size check in make_secret()
- Resolves: Bug#1469412 CVE-2017-10983 freeradius: Out-of-bounds read in
                        fr_dhcp_decode() when decoding option 63
- Resolves: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                        data2vp_wimax()
- Resolves: Bug#1469416 CVE-2017-10985 freeradius: Infinite loop and memory
                        exhaustion with 'concat' attributes
- Resolves: Bug#1469419 CVE-2017-10986 freeradius: Infinite read in
                        dhcp_attr2vp()
- Resolves: Bug#1469422 CVE-2017-10987 freeradius: Buffer over-read in
                        fr_dhcp_decode_suboptions()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-8" date="1500292800">- Avoid misinterpreting zero-size malloc in data2vp_extended() fix.
- Related: Bug#1469415 CVE-2017-10984 freeradius: Out-of-bounds write in
                       data2vp_wimax()</changelog>
  <changelog author="Nikolai Kondrashov &lt;Nikolai.Kondrashov@redhat.com&gt; - 3.0.13-9" date="1519300800">- Fix double free in rlm_sql acct_redundant
  Resolves: Bug#1551069 Radius service crashes with "Bad talloc magic value -
                        unknown value" when using module sql rlm_sql</changelog>
</package>
<package pkgid="6a50fe6a11317e29ec658808858ce9a49bb5c2ab7bcdcac265498222eb373aa5" name="gcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="dadf660b01637a53cd0a5d86e58774a5ff7e2ac03a9f94a0bc04a868005d3b7e" name="gcc" arch="src">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="a173faeb13f0ad863770930c16c974c7bf247d34b81ab8c6b2fbe9f57ff505e6" name="gcc-base-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="7964c3612811db999c5b5a9a99d5916ce446e2d7c88c98663fff1ac9bdacd6a6" name="gcc-c++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="5f6495f5750f5f35bafd75ac987c87d6a902ffbf831532dc7da971a5752fef2c" name="gcc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="fd26858cb23385f704b3078f25971dfbcc8c774283b8a8d467f3ae9622e18c5a" name="gcc-gfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="91acef51b083959f308df67bc41d28537f3fed3b2f7fc72a76766e1d13d769f3" name="gcc-gnat" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="2ad0e914cf14b5ceb919fa6d833ef0db6d14e441b6a9998c19490fab9b1de853" name="gcc-go" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="1cf313c7f5aad9045fae8df0c2cb44f479121b01adf5b764a2109ed3c75c71ea" name="gcc-libraries" arch="src">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="179f4b5191dcafb630355e3d7d78bd75abeb589a2293ecde6e6aa8f78de9908c" name="gcc-libraries-debuginfo" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="fd74e3cacbbd1d4e2a6569beaebc40d1de678f42df8acf58ed16022b48f44d76" name="gcc-objc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="646e863cebfe48e0efde3d9b9ef113966acffcccb7cb7811e4d93b124c97ed98" name="gcc-objc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="dbc51d5a65f0464ed5af88a9c4ad24a7c403c9a52489c8741678832c772545e7" name="gcc-plugin-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="47c6f78cd21e96d5d2570843422e9a69acca6793bab772cd93f14afb6a43cee9" name="git" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="fcc0ecd261d11c6a3b514bee6a53369019641fb58bc23e84fdcc6e9f9c374715" name="git" arch="src">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="4924cab148a79c8c6437faff5a489dd0ddbfd3edae9cf4574c1b49620e00e581" name="git-all" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="173485431191521232ddf8d6fc4418048c9b3ea068706f3e44a4952c70505776" name="git-bzr" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="45079e0a42aa28136189ae2fefb126490c5433f5c679370971c7f3a2b0e9bce4" name="git-cvs" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="af29d07d5578fa154585534969bc3cb76906241e5aa65963708ea967a32b61c6" name="git-daemon" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="e19981056e16713f5c7611e736e1ce8621da51b56cf3a1f808ae7d2e3414f32a" name="git-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="25073fe07852840f5f62a8ab5fafa080b41973df5e87a4515f8a4e3be8ba89d8" name="git-email" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="9ea3891c1b5acbcd0bcd637d3c2eda7840e65c15c40f3608ebfa233baf8755ce" name="git-gui" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="1aa8195edb44616134b14aae767c72236b07c9230bda692629d37f6ac803f45a" name="git-hg" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="22c3625068f6e67d92fc23f7d59459b712fe2b2a245ce6543f8d1580dd5891a9" name="git-p4" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="c80b9fe458a859b9bfae934094fe09ee6e60961cc201ce9a3dc3d981c4f12c76" name="git-svn" arch="ppc64le">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="92f6341df1ff8add949e54080bd9c41e13d0ff27489ce1e24dd13b1d1b8dc22f" name="gitk" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="543185875b38c08bf871b82626e32b8e8b46a28c6cdafaa31d7212528648bab7" name="gitweb" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="66b3158d041f025f537e569fb5d82b24e2d463afae39d2cca11021b7a5125bfa" name="glusterfs" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="b6290b46733417788b85189944df55b74e54a282dde85cbc7cf69a6a85017f9f" name="glusterfs" arch="src">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="1dde9540c8323dd7a48c8b67cfeb1aab4ad7b2860b63f6071f9362d326e8cfc9" name="glusterfs-api" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="f195d3dbe09ee20c9763da8c665a34880dbc484c2ecbb6bf2aab9779554eb5ee" name="glusterfs-api-devel" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="b11e227900c61482e9622ee09b9fd1721e24f9690e7660e5c13fc7d048749083" name="glusterfs-cli" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="6b49ea9e210e5799699590accb81fce3615634ef35bc9af43246b1b1c87a74ae" name="glusterfs-client-xlators" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="ac5b16cbecdd0d8c2cf2dee7e6b2911f12cfddc23d169b3e1ddd2006b4ab7b41" name="glusterfs-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="f0ff081a7def7c8fc86d9e563a421f8af9d862207c72bfeb98ede0f03f07051f" name="glusterfs-devel" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="3945981cd46d5c19aac9c241d0c1ad6b719fbf6e1a388a2efcb0cc149bb88e19" name="glusterfs-fuse" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="c1ca8daa075cf0a4f6ec72965e99b268e01a076ce37ba8b47e67f7575d07482c" name="glusterfs-libs" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="2e8ae149061f013eed143128f9bd538ee918b979619771602ed79fbf22924f36" name="glusterfs-rdma" arch="ppc64le">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="111da40234363824307f1f3d672036898c4c2c0a786648089903fa918247f797" name="gnome-themes-standard" arch="ppc64le">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="4997c94f0da3914e8f4457443c49b6005c12d8bcc2b69e3163ca92fe83b4f478" name="gnome-themes-standard" arch="src">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="92851a56482d1ca4daaf6aac198bafd0a679d4edfd59b04d412f9feff22c75e7" name="gnome-themes-standard-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.22.2" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.1-1" date="1366027200">- Update to 3.8.1</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.2-1" date="1374494400">- Update to 3.8.2</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.8.3-1" date="1374753600">- Update to 3.8.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.8.4-1" date="1378987200">- Update to 3.8.4</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.4-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Adel Gadllah &lt;adel.gadllah@gmail.com&gt; - 3.14.2.2-1" date="1417089600">- Update to 3.14.2.2
- Resolves: #1174391</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.14.2.2-2" date="1433419200">- Keep shipping a metacity theme that works with metacity 3.12
- Resolves: #1227540</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-1" date="1476273600">- Update to 3.22.2
- Resolves: #1386965</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.2-2" date="1521720000">- Do not set treeview colors
- Resolves: #1549711</changelog>
</package>
<package pkgid="3de02ab83242044cf4349f07690d9c162a1b3aeb05ec35e46da6602b9b11029e" name="gnome-tweak-tool" arch="noarch">
  <version epoch="0" ver="3.22.0" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.18.1-1" date="1447243200">- Update to 3.18.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.19.1-1" date="1453291200">- Update to 3.19.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.1-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.19.90-1" date="1455710400">- Update to 3.19.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.0-1" date="1458734400">- Update to 3.20.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.1-1" date="1462276800">- Update to 3.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.20.1-2" date="1468929600">- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.91-1" date="1473163200">- Update to 3.21.91
- Set minimum required gsettings-desktop-schemas version
- Update project URLs</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-2" date="1523620800">- Remove scaling factor setting, moved to control-center in RHEL 7.5
- Resolves: #1567040</changelog>
</package>
<package pkgid="d63ad6f5e31d73e1b120cb53a06252d7a6ca81375262b6b26872de8c9849f53a" name="gnome-tweak-tool" arch="src">
  <version epoch="0" ver="3.22.0" rel="2.el7_5"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.18.1-1" date="1447243200">- Update to 3.18.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.19.1-1" date="1453291200">- Update to 3.19.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.1-2" date="1454500800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.19.90-1" date="1455710400">- Update to 3.19.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.0-1" date="1458734400">- Update to 3.20.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.20.1-1" date="1462276800">- Update to 3.20.1</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 3.20.1-2" date="1468929600">- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.21.91-1" date="1473163200">- Update to 3.21.91
- Set minimum required gsettings-desktop-schemas version
- Update project URLs</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474545600">- Update to 3.22.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-2" date="1523620800">- Remove scaling factor setting, moved to control-center in RHEL 7.5
- Resolves: #1567040</changelog>
</package>
<package pkgid="1587ec10351245bda96c889dd364c9e32c960f9a17633ccb47084b46822b682a" name="gnupg2" arch="ppc64le">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="dc13d8751b0837a54f5f6020e197b9e598d1791a479f0335b509dc9d66e1f390" name="gnupg2" arch="src">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="89579f7264391d6cabcfd192fc4efedcec98012f5d5c675fc810ce125121aa30" name="gnupg2-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="4f58495e5427b16c6e3254fc1035b14530b522bcfed3bcc486efc5b36772584d" name="gnupg2-smime" arch="ppc64le">
  <version epoch="0" ver="2.0.22" rel="5.el7_5"/>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-6" date="1353585600">- use AES as default crypto algorithm in FIPS mode (#879047)</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.19-7" date="1357128000">- fix CVE-2012-6085 - skip invalid key packets (#891142)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.0.19-8" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Tomas Mraz &lt;tmraz@redhat.com&gt; - 2.0.20-1" date="1368619200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.21-1" date="1377259200">- new upstream release</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-1" date="1381406400">- new upstream release fixing CVE-2013-4402 and CVE-2013-4351</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.0.22-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-4" date="1458820800">- allow import of RSA-E and RSA-S keys (patch by Marcel Kolaja) (#1233182)
- do not abort when missing hash algorithm in FIPS mode (#1078962)</changelog>
  <changelog author="Tom&#xE1;&#x161; Mr&#xE1;z &lt;tmraz@redhat.com&gt; - 2.0.22-5" date="1529582400">- fix CVE-2018-12020 - missing sanitization of original filename</changelog>
</package>
<package pkgid="a2d9fac906a1d3ddbfb522b8c7e1e071586ee7189f9d2703bcfdf8207fa9e6bc" name="gsettings-desktop-schemas" arch="ppc64le">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="666e1458aabc34dc3c199340013990c63ccd7a82fb0cbb545714788d52d0546e" name="gsettings-desktop-schemas" arch="src">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="0c9063a85a8d483c662b27b65b0b46e09a3141a48b1a2107600b05f03bf580e2" name="gsettings-desktop-schemas-devel" arch="ppc64le">
  <version epoch="0" ver="3.24.1" rel="2.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.91-1" date="1362657600">- Update to 3.7.91</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.7.92-1" date="1363694400">- Update to 3.7.92</changelog>
  <changelog author="Kalev Lember &lt;kalevlember@gmail.com&gt; - 3.8.0-1" date="1364299200">- Update to 3.8.0</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 3.8.2-1" date="1368532800">- Update to 3.8.2</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 3.8.2-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; 3.14.2-1" date="1430395200">- Update to 3.14.2
Resolves: #1174444</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.0-1" date="1474459200">- Update to 3.22.0
- Resolves: #1386977</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.24.1-1" date="1505908800">+ gsettings-desktop-schemas-3.24.1-1
- Update to 3.24.1
- Resolves: #1481405</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.1-2" date="1523966400">- Add support for Wacom Pro Pen 3D styli
Resolves: #1568715</changelog>
</package>
<package pkgid="ea48c5746bc7ae57f1c02b1ceefb8cdce22438acd4a2526c90aedebfd0d60e7a" name="gtk-update-icon-cache" arch="ppc64le">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="1c9df7a960a32513c992ca64580bae4448f6716a433c05aeb745632437f4de0a" name="gtk3" arch="ppc64le">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="e5e235c856dbad78617eb8b5881bfb6ebd8c4b8e8648f39dbb7beece1dd71eee" name="gtk3" arch="src">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="7b610cdcf78107aeed62b15fe0344dd9e12bb3a4b63089b3ee9c18dcbd08d57b" name="gtk3-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="1e556d82a85e2a8d728571e75a340352fb79dbc0ab84ba468bfe03f852e6a15d" name="gtk3-devel" arch="ppc64le">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="8724699febf20aeccabbbc5838b94f0ee8b2c252585d56c0721d4cda169fe5a3" name="gtk3-devel-docs" arch="ppc64le">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="3fdd21c0f1453397da62a628c5b0b0a0d4ae9b4355563cd31d305e35b1c1b5c2" name="gtk3-immodule-xim" arch="ppc64le">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="2ca9a687a608e7fcfbfb7df793f2ee526a39bd76f2840bf2329efe041d9cc17a" name="gtk3-immodules" arch="ppc64le">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="42b67aabc6f9111254139327e80e79f4c8b8fdcaf42ba087011334cd8a659de7" name="gtk3-tests" arch="ppc64le">
  <version epoch="0" ver="3.22.26" rel="4.el7_5"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.22.10-4" date="1496145600">- Update Japanese translations
- Resolves: #1449636</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 3.22.21-1" date="1505390400">- Update to 3.22.21 and enable Wayland backend
Resolves: rhbz#1257171</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.25-1" date="1509537600">- Update to 3.22.25
- Resolves: #1481414</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.22.26-1" date="1510056000">- Update to 3.22.26
- Resolves: #1481414</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.22.26-2" date="1512561600">- Fix touch emulated pointer motion event delivery with spice-gtk
- Resolves: #1494822</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.22.26-3" date="1518523200">- Fix emacs on Xming
  Resolves: #1483942</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 3.22.26-4" date="1523275200">- Avoid a division by zero with RandR 1.3
- Resolves: #1502788</changelog>
</package>
<package pkgid="07b6ceb7adfe7a9537a4464351dcb0df99ffa200a45f240d72cf140bdf28d1a0" name="httpd" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="99483a5db5795ba52cd5984d2bcaf542a6cf77f26deed932a6ff3444683bea6f" name="httpd" arch="src">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="95f355fde157c8783629927cc7804f33569cee013f3abcacff01ec7a41958f55" name="httpd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="677ccf8a90a5312b876bbe32f6d5710d5e6ec3b112ba1868ba8d61a76a37b300" name="httpd-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="1e6a32361475e112d627c2019961c822a125d7af3f4611875e5e07117118d840" name="httpd-manual" arch="noarch">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="da7a7498a3eb0e76a93dd683b0c14acdf9005dfd8f9c2cdd8b6cdba088396bca" name="httpd-tools" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="b7f9c58936f238410f93e7315864bf59e1d54d44b6d8abbcc1e3cdfbc580dc10" name="ibacm" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="91ae58c276f6d2f7494bdb858b79be5f3bbeb9e3cfbad110229dd463dd2b3708" name="initscripts" arch="ppc64le">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="9898e8b1e447fd4b26e714006bc7eed55445ff1e9a680cc4d56ab4bde79098e1" name="initscripts" arch="src">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="4dc5de7190aab9b4cadf7a9c2a28f7c18b9abcf20d35c8cc5c651d95e3970d71" name="initscripts-debuginfo" arch="ppc64le">
  <version epoch="0" ver="9.49.41" rel="1.el7_5.1"/>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.33-1" date="1468497600">- network: run after network-pre.target</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.34-1" date="1468584000">- import-state: restore also sensitivity part of SELinux context</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.35-1" date="1470139200">- functions: systemctl show now returns an error when unit does not exist</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.36-1" date="1473422400">- import-state: copy just some attributes</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 9.49.37-1" date="1473681600">- rhel-import-state: fix broken order of parameters</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.38-1" date="1490875200">- ifdown-eth: we need to flush global scope as well
- killproc/status: add missing '-b &lt;binary&gt;' option
- specfile: mark 'rwtab' and 'statetab' as config files
- spec: we need newer lvm
- rwtab: add /var/lib/systemd/timers
- ifup-eth: remove quote marks
- 9.70-sync: Move everything to github
- 9.70-sync: rwtab updated
- 9.70-sync: service file updated
- 9.70-sync: syconfig.txt updated
- 9.70-sync: systemd/rhel-import-state updated
- 9.70-sync: sysconfig/network-scripts/* updated - part 2
- 9.70-sync: sysconfig/network-scripts/* updated - part 1
- 9.70-sync: rc.d/init.d/network updated
- 9.70-sync: rc.d/init.d/netconsole updated
- 9.70-sync: rc.d/init.d/functions updated
- 9.70-sync: ipv6-6to4.howto example updated
- 9.70-sync: examples/networking/ifcfg-bridge updated
- network: load NetworkManager connection via dbus
- network: check for running NetworkManager via dbus</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.39-1" date="1493812800">- sysconfig.txt: mention previously introduced NO_DHCP_HOSTNAME option
- DHCP_FQDN and DHCP_SEND_HOSTNAME introduced
- re-add missing $HOSTNAME initialization
- ifup: add support for VLAN_EGRESS_PRIORITY_MAP
- rhel-autorelabel: synchronize cached writes before reboot</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.40-1" date="1509710400">- require 'redhat-release' instead of /etc/system-release &amp; conflict with older versions
- ifup-post: always update 'nameserver' &amp; 'search' entries in /etc/resolv.conf
- systemd/system: symlinks for initscripts' services removed
- *.old extension added to list of ignored files
- ifup-eth: wait for STP to complete setup on bridge if $DELAY is not set
- init.d/functions: convert2sec() function added
- init.d/functions: is_true() &amp; is_false() extended by ON/OFF support
- usleep(1) calls replaced with sleep(1) calls
- network-scripts: DBus calls forwarded to /dev/null
- network-scripts: firewall-cmd replaced with DBus calls
- ARPUDATE option introduced</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1" date="1514894400">- ifdown-post: fix logical error in commit 5d61564
- network-functions: use POSIX forwarding instead of bash-ism</changelog>
  <changelog author="David Kaspar [Dee'Kej] &lt;dkaspar@redhat.com&gt; - 9.49.41-1.el7_5.1" date="1528718400">- network-scripts: setting of firewall ZONE fixed (bug #1588566)</changelog>
</package>
<package pkgid="245d14ae6f96086cd38d25f19392e142794af6cbb1ee7550fe67c4135a14a07a" name="ipa" arch="src">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="afa1fb83910415e3e770d13c4601c0c95c128022309a051b8df36e7284358225" name="ipa" arch="src">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="f327e51980a3f9b802cffab535f33bf7f7cb3322a2200e7ec28f58a63d2cfdca" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5b842a5c854596c97be96ae2c3c2a9e05dfefefb3f12943c62c700e70f8803a6" name="ipa-client" arch="ppc64le">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="7d74edae63ecad2258f7ab80b26af9dc583ff1cda544f23e2014346dac298281" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e5df97d7687a6f32cf72bf10980d7bfe622523a3d5ae446682f7370e65fcd273" name="ipa-client-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3c1c82d32f3e02067e68bd6c5a9497f250b0e0a7eb40157eab688d89a5434276" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="60882655047c876881dcd88391a18ac1933a7243e84088a174ea74c912725998" name="ipa-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5af93f0dfc1cf013b9b1bae9572a80b34571e0f0c5737c31418588aea6e54d40" name="ipa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="2fb10f65bae881a545b587630011926782691df5a0a1b6ea2507f0f8ea8eb970" name="ipa-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="83351b0605df2ae84aed0e02dabefc3c684d473199eb29e469044ed194815fcb" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="3a53f19f3d38b167c37dd64238e15ef9545674ccb43d228d4dda4485cdbc42b8" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6df42309e80e25769b219c990cddc0c7c2bbfed81ac857d09bce62cdd697e9c6" name="ipa-server" arch="ppc64le">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="ea77d0f986b64b7e2661e634d395472da31f69f52af3474551c6b2b7685a6101" name="ipa-server" arch="ppc64le">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="fb644af75b9d7d977ffde69a8feaf6ec08aaae437ef1c84b2c2e044717c710a8" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="be6ade00eed387a8f30de448e7ffe56da1c0a160219a6747afffb66b36ae952f" name="ipa-server-common" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="9d45a8c770c5571d9c2447c5410496faf011d04aaadc7a238daf1bef85dc4871" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="409a8228294f4da867b638fb4b206a07b46f879ba56bbf61c2f1a9b26462d2d8" name="ipa-server-dns" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5e71d6a74f5b3da6b0079c1c3627eb4c1ba91e6c9a05ba3026461e7a9fb8055a" name="ipa-server-trust-ad" arch="ppc64le">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="e79ed369ad0eb72dec5a3c1a89c7854209b81e3b3dde38dd90bd0d3a61b40e78" name="ipa-server-trust-ad" arch="ppc64le">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="6a71ea52868f399d252bc5396b266a9062a959ae25457cfaa1431c575e248d59" name="iptables" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="7aa519b5346bbfce046a0662a7c85e58043a5069c7ac531e392d394f727385f1" name="iptables" arch="src">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="513ca744d31a4efe14c5968e0fb229b880c20091519475652490e4172ab82502" name="iptables-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="76426e20d591010a89806e6f732c17823402b168831fbc749ef613e15b94ac02" name="iptables-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="3d91afec555bd8bb97b0c0901fc443b37d27a23be6f17806a4e916de6898ee7c" name="iptables-services" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="f75fbb7dfccbcd4e2e9938d64ccbe731cecf4463fffc1210063e3e036e8b5038" name="iptables-utils" arch="ppc64le">
  <version epoch="0" ver="1.4.21" rel="24.1.el7_5"/>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-16" date="1442577600">- Fix important coverity findings: missing include for flock and use bash for
  init script (RHBZ#1264399)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-17" date="1467374400">- Fixed init script not to fail on missing restorecon (RHBZ#1246380)
- Adapted man page snipplet for TRACE to use proper logging backend names
  (RHBZ#1261238)
- Warn about use of DROP in nat table (RHBZ#1298879)
- Fixed modules unload in init script (RHBZ#1324102)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-18" date="1493035200">- Add support for --wait options to restore commands (RHBZ#1438597)
- Do not set changed flag for rule check operations with module targets
  (RHBZ#1438597)
- Add version option to restore commands (RHBZ#1438597)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; 1.4.21-19" date="1502366400">- Use wait option for restore calls to fix failing service starts
  (RHBZ#1477413)</changelog>
  <changelog author="Phil Sutter - 1.4.21-20" date="1504180800">- Prevent iptables.service and ip6tables.service from running in parallel
  (RHBZ#1486803)
- Don't restart services upon upgrade (RHBZ#1380141)</changelog>
  <changelog author="Phil Sutter - 1.4.21-21" date="1504785600">- Scan /etc/sysctl.d for items in IPTABLES_SYSCTL_LOAD_LIST (RHBZ#1402021)</changelog>
  <changelog author="Phil Sutter - 1.4.21-22" date="1507291200">- Search for restorecon binary using which (RHBZ#1406860)</changelog>
  <changelog author="Phil Sutter - 1.4.21-23" date="1508500800">- Fix incorrect ip6tables.service unit syntax (RHBZ#1486803)</changelog>
  <changelog author="Phil Sutter - 1.4.21-24" date="1510920000">- Fix fgrep call over multiple files in iptables.init</changelog>
  <changelog author="Phil Sutter - 1.4.21-24.1" date="1522756800">- Fix for stopping iptables and ip6tables at the same time (RHBZ#1563168)
- Propagate errors on service stop (RHBZ#1563168)
- Avoid overwriting parent's return code (RHBZ#1563168)</changelog>
</package>
<package pkgid="669fd748fe1be0e98213448e0cfef1e00157fb77c2ad25afe2b34c5f20b79a03" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="535dac60f5638a972c529b6d271258b15a59bf53ca3ab55510893e8c43978c47" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="ca1041fca1e93fe8cf9e18e3cd9b6e3df1b1eb7f98355ee96cfe38a85c93c012" name="iwl100-firmware" arch="noarch">
  <version epoch="0" ver="39.31.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="3b81d5427a7e5db39c1b20a009d13cb455eb1e8cd28a3601024bcf0516878ba2" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="317271eced7c0e76b16197a257e597331450f533766dd037c3a52915ecab1420" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="6022191a7a07f4d8b026c894077aa145a907da26b5f5a256956473e6026cf348" name="iwl1000-firmware" arch="noarch">
  <version epoch="1" ver="39.31.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="698f1d304f1bb5ef7c5e1c0e6d8f45f7b5d226903888e12757a8366b12795503" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="47ea81c3cd4d4e016d91ed2b5ff791c3a37e6f29056184a0b8abe6fa97ba72f8" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="7c0cced0e7d7028ed74571f510d3247ffac647b9467ded6d5a753f09e03e6dc4" name="iwl105-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="4127b31e517f49143237106b5444fd4e2e800989ce2a40385930f65b5fc8d586" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="2bee8d29ac00337ef8d1db5d52fae165b7469104cb7edabf9093fc4928394944" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="49ea115adb85dc8fd557b74c2cbef98a211fe879785b8e2482bbed561a765ea9" name="iwl135-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="a009ca9e9c43d1d69392b072c0d5d968941ce16591e9c488c9e451f36ad97485" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="61aff96cc10d97bf3c41c71ab9f5577d423de6b7f0be6a312302dc7041ee7894" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="bf7a514e0b626d49ddcabe9314502f4fb63b1b4f24cb35e2d987b8484600d7a9" name="iwl2000-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="cf5fa3758ea1ef99bee2fe4a6154dba61c2b8ddd3733f0abc5adbaa1ba080f65" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="5ef16d503dc3009ddefad342abc563d49624ff85ff28e99296104bbe4d9c2313" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="110e48aa805f3b04034df5783f87aef7444c9873905000a8fe84f90b3e587fed" name="iwl2030-firmware" arch="noarch">
  <version epoch="0" ver="18.168.6.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="2a151410a7cc2f82b490de67a9eebb37921066b5148c675f1cd2ff3fdc74973c" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="96022ac82657ee01fd4c083156e89eba0cc328aa02d3891408e1d9ab2d496685" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="c82104d6753fbfc22b46f74fad466ad8a3204ae1fb97994a5d12760226cc9f94" name="iwl3160-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="4cac847b1db801c75df7c308efde6b3e0c03b7f37f3c69dca3d00420c24f03cf" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="8b806cb2d6590642adf32e9496df580cc3efb70e3700a98ba06ea0f40b9e5d18" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="741a9564bd68bdf3fdc6046e47ae503bd0a3ff1e6d2889973d48f69145d08f8a" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="b31596f04ee016605e67752915a8a50ade64d208769ce55df3ce9f87119053aa" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="10b4313d74ab5d1f2a2c31be62132f110606a9b938bc0f7aa1be1c9f79e9d17f" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="b9004f09c56c4ea03b50eb95cd06c7fae8190950e7ba1280ff7d69cfdb549538" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="26e9f1ee40406260fb10361e8b65a4318aa023796013e6cf7f6676aa84e2f12f" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="4a3a5137408b1e9155989b0b49e70ae126a4b0b6cae223abeab692ae1f4e0d82" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="19cab6235a2564227ee178a8d0f187e48c9265459f92baa0692c8e6aff509dfd" name="iwl5000-firmware" arch="noarch">
  <version epoch="0" ver="8.83.5.1_1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="7528be4ccab1a22766670cf953167be186ff6a81be724c91db77e75e1cd334dd" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="1bd17a51e0ad13a1d3024d561ef59c766b471ed624895e160bfe60561a7e7acc" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="8b545d3e61acaed2ecef9f3e589e59b96a5eeb320ba8467ff6af51d130d5b95d" name="iwl5150-firmware" arch="noarch">
  <version epoch="0" ver="8.24.2.2" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="54a2fcd4cdd1084a720bf4ca0d1b442bd58142b01830fd9dffdff91922e60b68" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="0df97d729907066d2dae2b26c0843f250e2b806d2a68c4b16caccaec6544ee08" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="08f339587dc1ae0b542d8e1582f00bdd491a0f8ca88c89312ddb0f8df733e476" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="a9e9ed8fcce5d88e10c21aa695c08d4290fa4ef3faaf08ba8118758cf70f184b" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="a96d154583036ee7c9f8ad9359d2c75156b609f6f1e4f6d4f4000c0fa54ed0f1" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="2625275dd64b0893477868f11eb75c301b214be7a63b380645fe9938a2728d08" name="iwl6000g2a-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.3" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="93f94265b906f16bb201c72d4d8adda12524996441d7c58dd5a81b63d11bd0f7" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="c87485d3e7401c9c8c6083de9419789414018fbbe7b6aab35f235ff34a353663" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="aeb594147fb7e977b41d59325371cd02dd8fd708053db2b1e2f5ab5f2665401d" name="iwl6000g2b-firmware" arch="noarch">
  <version epoch="0" ver="17.168.5.2" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="473e9c0741124f7ffd4154e123ea878c33452f4ee30ab42eccaa7dff16c953e3" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="739ae5fb878f089bab41c3f57a33a8fa65d64fdaf89972117dad9381ba2c380e" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="baa83b2c0dda9fd2db3d617df9e8dd03b0bd701056af685b48764d12e5ce0bac" name="iwl6050-firmware" arch="noarch">
  <version epoch="0" ver="41.28.5.1" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="dc04055034701eb3a08db9b4856cb7532c6ac4dc10a95f315e3ecf031161b0d5" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="8dcecc50896efc250d94fa57568642c1bed2593ee725b746c8f5cbf2aa8af027" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="4a2a84bc93aa7d452ce04986738360bba643b2f40ebecead6c1b679509f08214" name="iwl7260-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="6e0c35d5524158b108bcddea489c3e29741406d44c2083ca0ce35967cbf6eeed" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.1.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="02ddf01d71fd80ae52ba858730c5b6e368f6e956a736fca08963bbea00323ff2" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="1b7f28d0dd196d659a368315fbe8e741f4083aee9e8fe047aef56db54d620288" name="iwl7265-firmware" arch="noarch">
  <version epoch="0" ver="22.0.7.0" rel="62.2.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="2ca83add3ab4c3796d58cb059309c480bb42c69358fd2980dab0ed86395be4e6" name="iwpmd" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="5d0eb738e2cdefee02fc068e9764bc73970d9280e48be64f8ddab04917871e14" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="80c078541f6d711df5ea17bfc9c2fee2ef2c2c75cb94a0289d1edd24fe949129" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="6deb7026d408d06c20d7a12db0b64d36bb9d56751a536092aa95470573a58a65" name="java-1.7.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="388a5d61a99339428aa5029bb7f34fec522b849b8f651990a89c01381268518f" name="java-1.7.0-openjdk" arch="src">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="0c48538fb89c5ce6b9344f51b9a8ceb27a384f1012230667b14a29be928225e2" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="ea0e8966b2c367d7f88c476c57565749638bbdbec5d0ca711b7e2e84b7fe8d9a" name="java-1.7.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="ea3950f89e7a6f8a7bfac6a073b468f13fe4fd9a14bd4b3a9398a87b6e5e2cc8" name="java-1.7.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="0c5fa4088120063eba29df4a4f5b1dbbef6d96e5fdb5aa3d9f14a2e9d6ac7f90" name="java-1.7.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="865c65f0cc06c79fa2cec934dfc39e73b49bfa74ab0ed1f6a6074a4e8dc43f7b" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="ed727b4bd573cadf8170ec1026fc95402f5fc99bc14e23fa36281cc8bab81c13" name="java-1.7.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="95d3fc95a6f63efc8eff142379e6c4223ca8384d50cb112bb66a00b9552fdba9" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="15b53d054c91281de6ca59c00873ed15c582d6d6858c4df37d1b22477d43eeb8" name="java-1.7.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="57d1ae2bce31eae6bb340be10960f3f54f917b56ba3115bc1f5b5006ca8c5681" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="d57b59a2c5ba14ecc7d10866a4947865cbbea1fbc3e45a54e9c1621413577ded" name="java-1.7.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="b59989ce859bdd662a620e1d00c854b1077d631f13fa3573f995563610288b21" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="768c7fcf3263ae880b20b23120a1e6c92c84e1e04ae33f505a8d0d36b4d0feab" name="java-1.7.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="990de8a8098ee1e610a4d5ab997fe629b30bf790aedd666a920cadf5e66db319" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.181" rel="2.6.14.8.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214400">- Leading spaces due to empty CFLAGS causes build error
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214401">- Get rid of troublesome CFLAGS altogether.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214402">- Only define archflags when needed
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214403">- Make archflags inclusion conditional.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.171-2.6.13.2" date="1519214404">- Remove archflags for now.
- Resolves: rhbz#1528233</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.0" date="1524139200">- Bump to 2.6.14 and u181b00.
- Drop 8197981 Zero 32-bit patch now applied upstream.
- Update RC4 patch (8076221/PR2809) to apply after 8175075 (disable 3DES)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.1" date="1524225600">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add missing ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.3" date="1524225601">- Bump release number to an unused one as rhel-7.5-z-java-unsafe-candidate wrongly using .el7
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.5" date="1524744000">- added depndence on latest c-j-c who do not have the incorrect jre-abrt handling
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.8" date="1524744001">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578560</changelog>
</package>
<package pkgid="5a4872a05a49ea9f96735ae46601802ef283a7bc845e1155bd675868c4476f32" name="java-1.7.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.7.0.191" rel="2.6.15.4.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.9" date="1526990400">- Fix patch files to appease git apply --stat
- Resolves: rhbz#1578560</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1529496000">- jsa files changed to 444 to pass rpm verification
- Add reg-ex for filtering private libraries' provides/requires.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619200">- Cleanup RH1566890 patch and differentiate from java-1.8.0-openjdk version.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.181-2.6.14.10" date="1530619201">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.0" date="1530619202">- Bump to 2.6.15 and u191b00.
- Drop PR3608/RH1566890/CVE-2018-3639 patch now applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.1" date="1531310400">- Bump to revised 2.6.15 tarball with PR3604
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742400">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.7.0.191-2.6.15.2" date="1531742401">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.3" date="1532001600">- Bump to revised 2.6.15 tarball with jdk7u191-b01
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.7.0.191-2.6.15.4" date="1532260800">- Bump to revised 2.6.15 tarball with PR3616 -notimestamp javadoc fix
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="ca5e354f7f20772fbb9332b7db1cd564f35e600c744750143cb39db11d8325f1" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="73a6274b069f4a38faf46a7bd8e1434461ee2be77096cd4eeb6e264d1c63e6be" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="881178541e066bd0b602f0798112a041485f300ca0ad7066566856aeca740125" name="java-1.8.0-openjdk" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="adec6f04c18965cee91b4f265c0a29906a74f82c8108829926272b66d6e6db39" name="java-1.8.0-openjdk" arch="src">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="b65265019e036f49a6da3a7b40fa78884811249870d92fa4c8f915d421409cc1" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="df236793c731118a825952156067914ecf03678570d19c910affc7ed13317148" name="java-1.8.0-openjdk-accessibility" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="f300d199dd46da730715d7a6e52ef7e61aa563ddc2b480edee28616988d5d0f9" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="70629887a4ad632fdf343b52c1edf5b2baf05b1316675894d9b9ceda33e7b0f4" name="java-1.8.0-openjdk-accessibility-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="e645f3c6eab6a63141aeab9e4c142f35de4cd4112303d1dfa7add07376e89c0c" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="80007d130bd0d3452a51c8a5d56f1b8a270bc18c6b7f9b601d660c2850516ea7" name="java-1.8.0-openjdk-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="e108d4c06f06f390ccb3c52896905d9ecb2bac8e30718c9b141397c150e3527e" name="java-1.8.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="52dc1e453eff08f1e19a6a42e9744fbd607157338d595d4d5a6829577b4589a6" name="java-1.8.0-openjdk-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="8eef4892df936b1841aabe744020ab9600d7786f8255d21b0b20b86a237efdf3" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="c7aa9fb6c3def83879b8dd1434a21c4fd461e4644164f91395da9d0736be0358" name="java-1.8.0-openjdk-demo" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="22615c4faa9f8279587f8cc0960530c819dc741f2036aa6f189adb45a4b88b50" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="35629f2c6b92ad3e6390b821d5bb3934089a504c3fc9835b788a24fcd6bcfdf3" name="java-1.8.0-openjdk-demo-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="44d515129d66714760f3789ce28ef92ca0e4b4fcf97c059015b90a23dfeb583b" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="1af0dd7602b26330194db03e6095d992d48bdc535b68848aea8ce8880a37e6aa" name="java-1.8.0-openjdk-devel" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="48816ad0027df1813ed30232fde327f8238f9ac6c6e058f1dae110262afe7349" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="daf93909d6ab53a09a2fa590029b805ba07124056f6ed6ab9c51658e39cad666" name="java-1.8.0-openjdk-devel-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="7aeb1ae66e856d7da15b7573f83c5da3f789980f5b2506a714c8270fb53347bf" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="c239ce98e9875ca36c90c416f0a61d5f4e20065a3913fae52a22ac1e81a4e9ea" name="java-1.8.0-openjdk-headless" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="05cd78f04d1d663aeaa0a880064c999c2a231a373f7e77b74d742d3fdad23181" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="f1097674b90eca3fc096083c305f3247d08ae39cbdc9a997b01492a20f466a1b" name="java-1.8.0-openjdk-headless-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="88fedf1071203c3e39b93f0fa06b7681faec0b406341ee926421f239f4013cff" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="d3b6b5a5aee8cdb9951fc00a45fea96b487d9b0df5e5c2617c276edb6c0a7bdd" name="java-1.8.0-openjdk-javadoc" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="199732480fcac7626cb67f759eb582ae0940c727b3790f477a19948b052ec224" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="c9c5dab56541f094fb033e8fb9fadba281ce2108f5e5bd12e2c63280dedab7e9" name="java-1.8.0-openjdk-javadoc-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="c0ee10fb70ad0d21630d39bb819aeac77ce09ba580198d83063a869d534fc891" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="7db136c2c091e4b303fa8475a45945212db765c7a8a229e36f1e0271a843f040" name="java-1.8.0-openjdk-javadoc-zip" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="3d7dcab06f102e71b35f3c36b468f54642a3d8dd11ca93ad6e3752fde5bc86d0" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="362e8019c1b085709e160a595870a4dd9b271373c26fa8e8c9ef291f3b17e6b6" name="java-1.8.0-openjdk-javadoc-zip-debug" arch="noarch">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="ebb4391d17fbbd5bebde1fc5f170b981422888de0e4d2ae2d47649847cbb8058" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="de7c96afa048a0f31da286b02a5ea4ca5a032352672aa0ae1ad7fdd0e17a0ce2" name="java-1.8.0-openjdk-src" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="b32b753085a3cbbdef1c710084dcddd0687a29c98bcfdbde820ab5b17db29927" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.171" rel="8.b10.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.162-0.b12" date="1521633600">- Update to aarch64-jdk8u162-b12 and aarch64-shenandoah-jdk8u162-b12.
- Remove upstreamed patches for 8181055/PR3394/RH1448880,
-  8181419/PR3413/RH1463144, 8145913/PR3466/RH1498309,
-  8168318/PR3466/RH1498320, 8170328/PR3466/RR1498321 and
-  8181810/PR3466/RH1498319.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-0.b10" date="1521892800">- Update to aarch64-jdk8u171-b10 and aarch64-shenandoah-jdk8u171-b10.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522324800">- Backported from fedora: aarch64BuildFailure.patch, rhbz_1536622-JDK8197429-jdk8.patch, rhbz_1540242.patch
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-1.b10" date="1522670400">- Cleanup from previous commit.
- Remove unused upstream patch 8167200.hotspotAarch64.patch.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-2.b10" date="1523534400">- Add fix for TCK crash on Shenandoah.
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534401">- Fix invalid license 'LGPL+' (should be LGPLv2+ for ECC code) and add misisng ones
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-3.b10" date="1523534402">- Fix jconsole.desktop.in subcategory, replacing "Monitor" with "Profiling" (PR3550)
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-4.b10" date="1523966400">- Rebuilding due to bad nss-softokn brew-root build override
- Resolves: rhbz#1559766</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.171-7.b10" date="1523966401">- Bump release number to be greater than RHEL 7.6 package to allow build with .el7 suffix
- Resolves: rhbz#1559766</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.8.0.171-8.b10" date="1526472000">- added and applied 1566890_embargoed20180521.patch
- Resolves: rhbz#1578555</changelog>
</package>
<package pkgid="1341bfaad8080f739472b27a525d55017b03dbf1a4c7220e2764d100c5d3605b" name="java-1.8.0-openjdk-src-debug" arch="ppc64le">
  <version epoch="1" ver="1.8.0.181" rel="3.b13.el7_5"/>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.172-4.b11" date="1529582400">- Read jssecacerts file prior to trying either cacerts file (system or local) (PR3575)
- Resolves: rhbz#1593737</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-0.b03" date="1529841600">- Update to aarch64-jdk8u181-b03 and aarch64-shenandoah-jdk8u181-b03.
- Remove AArch64 patch for PR3458/RH1540242 as applied upstream.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100800">- Update to aarch64-jdk8u181-b04 and aarch64-shenandoah-jdk8u181-b04.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100801">- Mark bugs that have been pushed to 8u upstream and are scheduled for a release.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-1.b04" date="1530100802">- Add hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-2.b04" date="1531310400">- Add "8206406, PR3610, RH1597825: StubCodeDesc constructor publishes partially-constructed objects on StubCodeDesc::_list"
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742400">- Update bug status and add missing bug IDs
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742401">- Fix requires/provides filters for internal libs. See RHBZ#1590796
- Resolves: rhbz#1594249</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1:1.8.0.181-3.b04" date="1531742402">- Fix hook to show hs_err*.log files on failures.
- Resolves: rhbz#1594249</changelog>
  <changelog author="Andrew Hughes &lt;gnu.andrew@redhat.com&gt; - 1:1.8.0.181-7.b13" date="1531742403">- Update to aarch64-jdk8u181-b13 and aarch64-shenandoah-jdk8u181-b13.
- Remove 8187577/PR3578 now applied upstream.
- Resolves: rhbz#1594249</changelog>
</package>
<package pkgid="a435cb8cf2eb280395435da8dc288a82594408f2daf5f824a2d799ed3627b1d3" name="jss" arch="ppc64le">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="677e08ba98c684e60aed0f5051393b0497ca8bc8e70ff6a3dc9af4a4f1b2e7ca" name="jss" arch="src">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="e6a197a3ff6bf001aa63f7a9d41f9e90617a1c1c8a1008d32cacf8b199b10f8b" name="jss" arch="ppc64le">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="2f85c1e63dc4b8a61ab3e06ab276e8528df403bb5b39342eb88e2420c00d0aea" name="jss" arch="src">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="b823553e1308cc63d2f52bf1fb43095347b9595e54f78527042f800d3f6f482a" name="jss-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="81bd6db2188db9544c9153e6d79d1ef59ad9aa4e5a6d2abca347d8417fbe19ee" name="jss-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="2111d4c22817e3ad0f39fa20c3078af806988e18996818c3602fa06fab40a4fa" name="jss-javadoc" arch="ppc64le">
  <version epoch="0" ver="4.4.0" rel="12.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-3" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="5e0cac7fa81391f18c42c3d40048c734e4deda297647c0b93e30b7e6d5d345db" name="jss-javadoc" arch="ppc64le">
  <version epoch="0" ver="4.4.0" rel="13.el7_5"/>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-4" date="1490616000">- Bugzilla Bug #1394414 - Rebase jss to 4.4.0 in RHEL 7.4
- Updated build requirements for NSPR
- Updated build and runtime requirements for NSS
- ## 'jss-post-rebase.patch' resolves the following issues ported from
  - Mozilla Bugzilla #1337092 - CMC conformance update: Implement required ASN.1
  code for RFC5272+ (cfu)
- Mozilla Bugzilla #1347394 - Eclipse project files for JSS (edewata)
- Mozilla Bugzilla #1347429 - Deprecated SSL 3.0 cipher names in SSLSocket
  class. (edewata)
- Mozilla Bugzilla #1348856 - SSL alert callback (edewata)
- Mozilla Bugzilla #1349278 - SSL cipher enumeration (edewata)
- Mozilla Bugzilla #1349349 - Problem with Password.readPasswordFromConsole().
  (edewata)
- Mozilla Bugzilla #1349831 - Revise top-level README file (mharmsen)
- Mozilla Bugzilla #1349836 - Changes to JSS Version Block (mharmsen)
- Mozilla Bugzilla #1350130 - Missing
  CryptoManager.verifyCertificateNowCUNative() implementation. (emaldona)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-5" date="1492430400">- Mozilla Bugzilla #1355268 - JSS 4.4 is incompatible with versions of
  idm-console-framework &lt; 1.1.17-4
- Red Hat Bugzilla #1435076 - Remove unused legacy lines from JSS spec files</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-6" date="1493640000">- Mozilla Bugzilla #1352476 - RFE: Document on the README how to create a
  release tag (mharmsen)
- Mozilla Bugzilla #1355358 - CryptoStore: add methods for importing and
  exporting EncryptedPrivateKeyInfo (ftweedal)
- Mozilla Bugzilla #1359731 - CryptoStore.importPrivateKey enhancements
  (ftweedal)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 4.4.0-7" date="1494331200">- Bump NSS dependencies from 4.28.3 to 4.28.4-6 to pick-up fix in
  Mozilla Bugzilla #1360207 - Fix incorrect if (ss-&gt;...) in SSL_ReconfigFD</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-8" date="1505131200">- Bugzilla #1488846 - Fix HmacTest code for AES encrypt/unwrap [rhel-7.4.z]
  (jmagne)
- Bugzilla #1490494 - PKCS12: (JSS) upgrade to at least AES and SHA2 (FIPS)
  [RHEL-7.4.z] (ftweedal)
- Bugzilla #1490740 - PK11Store.getEncryptedPrivateKeyInfo() segfault if
  export fails [rhel-7.4.z] (ftweedal)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-9" date="1509105600">- Bugzilla #1505690 - new JSS failures: HMAC Unwrap and KeyWrapping
  FIPSMODE [rhel-7.4.z] (jmagne)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-10" date="1509537600">- Bugzilla #1506710 - JSS throws ObjectNotFoundException without message
  (edewata)
- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.0-11" date="1516622400">- Bugzilla #1506826 - org.mozilla.jss.pkix.cms.SignerInfo incorrectly
  producing signatures (especially for EC) (cfu,dstutzman)
- Bugzilla #1533667 - Add: standard algorithm names for all ECC signature
  types (cfu,dstutzman)
- Bugzilla #1534761 - SignerInfo class inserts wrong version # into the
  resulting structure (cfu,dstutzman)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-12" date="1526990400">- Bugzilla #1579202 - JSS has wrong encoding for ecdsa with sha*
  AlgorithmIdentifier [rhel-7.5.z] (cfu)</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 4.4.2-13" date="1530532800">- Bugzilla #1595759 - org.mozilla.jss.pkix.primitive.AlgorithmIdentifier
  decode/encode process alters original data [rhel-7.5.z] (cfu)
- Bugzilla #1596552 - JSS: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="0fed4340f5a309be7761f54c834237fabaa8a8ef793db90bcb014fcd2ec9572f" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="dad91ceded8ac704a332f64b44077471678a9eb9183aaf75f7b34508e2e242cb" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="2671cd3945e891a31ce1dc79985dd9ea04afc9ad851b65d312bf79e15343c9ce" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="6bec9dbaeb30b688ab08271ce8ed53a38851845a51799a02cdf8618eb2b02704" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="e996d33e05aec34fe202d09ae2c1290e71e6648a1aca379abfcf3fc232eaffd6" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="70238ce58f4e3050e11f43403809ca83bf1ecd3fc18160616555bd00e7372af2" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="00d27965a1be87a35a23969f7bdeebe6f902cba50d5cd4961edbc8043947677c" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="2ec85ee08a1561e1c655afb9d8494a450cab55061301611fd988036ee64b200c" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="cf66a2d6315c65b61eb8124c915ea651d3f3af1eaf3a170db05c5a7b624a3ef8" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="f04c563f8c4bb416544f20b99cf12743340ff0bfcdf61cf24c22ed1a8570db91" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="83b35a9601a12fc9cedab3278a81f9b36bd79fa58a5c6a879fa5f2ea1a3f2af2" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="1da6f71c2c231d7515945e7703c2d959bd4f60335e5c4a361e40a0bbc311e950" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="c2d11133b88f9ee6c1661991f3b4b2a643cbdd25f418fbd1b44b9c6bcc5b8493" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="12fe2d6cd7bb98ddc9a64de19646c4296a322e3ceffb658e6be3ae026b3a6df8" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="c148704f99b7e58a5a214643642934bcf0c821a6d9124dd98e81634646b08433" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="126edebf9045149f6f88e3849a459a9abf3c4df57c5b4be02a9f232f19ae0fd8" name="kernel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="9424cd57ce3b67e0ec0c6b1775245205c6cc46b42108357a86cd82725480cf2f" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="595572724aae52fb6cd9ea40c2ac4ef3a50b711a11c20ea24b3f24f4339e8c96" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="e8c4526fb14e3ef9d98d256be89279f08f3b1345e421d13717d61c614f127d84" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="bc99dab6a20a52904b3b51293885812dba09552703571c7ef11cfdfda924e3ec" name="kernel-alt" arch="src">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="1d9a26f3b0ce361f2f67ce1601e2998d93138e75b901b7e49499340c5bcaeec1" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="2a515127a867bca3fb864d983912173efeb402b58ddac4ba36bd4d2384bc896c" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="3a643f9bd3921d1b39ee6dc04dbec0a9b6dae7e32ae08bf56f6b75eca34531ef" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="2bc98e239dfcdf715a265c7da1831592d820b334fdfb8eaf3fccde5b343f2975" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="e9e5d5e74ccdc862c488180bfb12292e01bd3dc72c9b02520074e636c8c31d9f" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="439078e8be2db9332210946b6009de92fcd81d75a1ed4cd80e84c1a9a22b145c" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="1877db1dfef8ed543c851432818dc460feba954bc323b11306f149884ae66702" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="6fe1705dec45cd503c061d3b21364ec5d55f454b1b1daaf55552aa05a7f1d490" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="283792e51ec650e32d0644370499adeb577ccdbfa3966bca23c40b78909bb4d7" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="81c1a46f2a829517eac0ede77df4cd63e8dd79e2786b26e5af69131358ced273" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="34eade57006ab098276e92b18baa1f8e93187c0ee2241c5ac68f11c8daf5d136" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="8f5c753b79db464c760d5279f2ff3b2b4b9312288192a3dd8b0e6622c4bc646e" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="6539215228a882ee5f156c5549a07d765f25b6cf9efbaf039ec1fedff568f564" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="0f82264a47c7c0c76732ebb79df38e806d994b97a05867c299a4ed1b48ea6859" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="fc6e592a1edbf80b308e883e67e5883b3ed4a2bc23771ad0a1f0c46e0930d591" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="0fa1d64bcf8fe9f4c25edc98f91929fa24fbed9270bfa8f08685fac8fcf2cb24" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="60f5b9eed73df94c52219e28dca270b4bb2b80fcaf17ac7d88c4a96f43ea7e22" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="7292e00f86f910f52658b3aba6bdb1db1e979e1b5bec97d2a71da61d3adae8fc" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="552fff0f07724e3cf5af5f0134d3e67803a027d179fb7a1b0329a422959644e9" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="99aa97bc6e701390e14265c5af625ad7daad792d433725657be9654272027db0" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="ded270cef8971801c5e5474c15c5b060fc37c73d31241ce92fda3a8f36c28d07" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="5b4c524c13e91adf99190f58fdad8eec7a2481cc53305d622d660412cfbf27f1" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="87ccd0d7f265005c5611b7ae292e2d60733997aad78422aa38bec303da1ba33f" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="673bbe556ca2104c9566281fc112a20889e3658882375525b1e6fe6ee58227f0" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="73f160418cb57c13d4d6269a76516cf48f60af9a71d024ffb1f476ecc73238c4" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="30989d1aa29731186372ce9e53effb226d0a8805e8833551cb0afe69aa95eab7" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="a0ece9883308947893af45eee763f29edb9831dd8f4f0e014e3e4b9611461942" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="215dcef148fdc41ae258adf379a4ee6acbc9371b51ee238e453a38e9f3846919" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="a6921a673647e63df221b6b4b3c54883f3337ad6fc266e7145afffbdb7ad7da3" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="45101c748bfaeae0cb2fd88bf08be742f17a602006b43ade31accf596b0b6b00" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="68d112c23fe744730b007802c786d4ff5640c64b949cd471e06d4e98c816b7e9" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="1670aac43de1faf4a76b1b832fcb40214e79852dad968c14f196ac6d9eb73784" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="e055393b25eaaefacbb597d9b7c104d8c5a39adef55435687c188bd6c88a05ad" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="d4da31e640c354251572fc83dc1790fe95e299950ca765e290206a8c27567b65" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="e0533cbe6f83bb1c2b474fc4c1c7fee232d82d0cae78421c48ebf3b75efae64b" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="d0804bd5ae1d53b354fd78690f77c06b4facce6d83a469af85070c7f34d3527e" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="9a3c9f2f6c313eb12c201fa2bfeb890a64a31bb05712f9ba05ff49fc7203b8af" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="b06d2898fe0ee3371c4fc1bdef1a3ab92b3aa889d43c736bb7fc1192b16496ab" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="36c85c58c2484ab9ef0ff7c54ae9dca685d0485e4734902dd4c9e9b00ae8d640" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="4006c738a958b1f824fe59447fb3951c0a77fa323dd1520968f6b1365635213a" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="bb00a436ed3c83cd0c3628371b203d3da34251d0297b5685ef8f7fd4be2cf704" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="11fdb43243736248562cfbbb785c5d2526640d31c46c72f242a9a30f5ef94735" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="ce889fb6ec3f83a2f3b49e880dbcf19010f140d86286020e4249140f4e31fe1f" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="a5e6857cbdc359336f79f5b1a83f917c30f17cf0c62d9f49db1771b24037a123" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="bd567d19837d8206fa1b05c564bc21a5e5f35fff1de9bef234e09b848062bcac" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="281c6ef99a8e2871ae5702011d4a245eb7b3e8c873e1ee33cadcd15e44e775d1" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="4d08f83f55f5f16d6171200921c755f2284ed76a042edff26cc6eb9b5c2090c2" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="b6644bcbdb4a370b6afd8dc4083a0711b264d7191d7b859b14c183e88482a6c4" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="36aab8989abcd169243004d1815a19d29d7a04cbc7ffe7ec41752b00e19ea7e6" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="82908657c1fe3af848ed0acf5d508d102fc2e7d8ea1f3673b41df4f3ac65b99d" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="3ef507cceef07846b42a3ec09b66151402a864f45733bbe2fa86542ceb48664f" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="46dd94cf3475c412ab114b8e1d2e5ac0b4dbd59e9de5f4a43e9b0112dbbb2a20" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="c723fbd67fd711d0a4c4965606d393e7089fb4d70dcbff5a63d5ae0d630b98f3" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="b6e340783c44c62d55454cccfa6de29ee7b893241fd8259978f2f7b26f7df639" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="869fbb2fce178a69dd44f74c7112c0945b00eaad0068736edb2db17e1fb7e503" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="d4e7e681e7cd0ce042e3c2185474d06e92873e4413174fcf17c80de92112ca59" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="d2d2204c1fb726de4748ec4ae2881cdaa3b6296486dba103cea0065fb80acf8e" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="4f6ce27c94b6b793ec7cd3aea5cd45c04caf3799e7e5bea908ef675f4ec1640a" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="d63b88329ab61a6f9fd5f7d0857ac2901c23ca44157bedae4339adf88991223e" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="d047e98620ee18ced69d2e5d9ab37d6fa9138b29a9767035d281651a82028a8c" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="4c32b8f17ab848193b9b7bc9150119fe5a8398decbf3cfe420550b39efc6a24e" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="90279df262d6d4429aab7d00a6146acd1c544149451b5d07ea34fd155acc0d40" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="553775eee6af91c745565a2eb2ebe5edc368b8e353c59df0cab6de2584ee12a3" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="f47f5daf479d1b3431b4dec07ad007a668651bcf931e90ea661b64512735d365" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="b13600bfc0c99080f9964084835f6eb903f11e6b4af30ee66c6f75a54bed7d3c" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="3e2c83b8d9f880cb2a9f2c880e4cff023baa2912ceda711ec7bec8a8e7791327" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="98a49ff5922f3c2ca190c86a88d1bf478c61d5bef2f4afd5edd5f2e7195cbcf1" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="b796170355761de466d6d6f5f8986e1b8f99988b3e87ec7759ce7dd06f4d9732" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="983ab0a2b8ab566801c0f8ae4e345a66241021e5c9793a19e82def014dee6951" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="1613317d462a6b880ebcf020aed8d7c9c8252fb8d1428ec4e214f41e7b79ee11" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="f38ec238fd7189398e1d40adc50cfdae937cfc09a2761f4b9cf7cc517c87c85b" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="d5799550eed5d47ae260c624f3e8915237300c6719a85e29427518aabe9a9c3d" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="646899fec5889da8ed1f104330b6ba6046b5b13478b8e51a721b2f5a82decc63" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="bb767083da246d3649320f47dd12b6d250dfc83d783825bc4e921375a0b96a37" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="8e7826d1527158b42af89da9258fbc72a08440357bafbd46b9c94a79e308eedf" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="5202b0b8357d8ab0fe3fb34b84469eca528eaf03b3761fb9423b3422151af231" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="a4dc3ad517d267877ed13fddb1ba31d2ae41756499f93a9f00c3e3b77c79b1bd" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="7fb3ae93c200855376f807e97514ffa442af55bf14d25c61e77347e515474cf9" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="0536032a2722806f2248ccd6472b5481913ecc0942218bf2642e76ffe65ddbae" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="03db2a2454da7e8d42f6dc7ec6e4fa3d1defd116a61553554fa12592b6be4982" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="1d892f3fbdf3b9ca6dc9179ea1e9e6033d535e36b872b84137482210d971e4f3" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="0b063a583df106b7600926d9438d970882bc7c38a1f9856cd0d753af594375da" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="a77ae44f6cbd5f09fd224aa4826785a75f24e9a54cd27ef4b3b2ac9b47527f5f" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="cd476f42b1f923c2a48089be5c27060625ab8bc6a755f935bcfbc867a0d7af82" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="8e23eebdc83767344a7f460380528dcf3960f0d66312a81192dbd6d5af7e8184" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="e981cbcbef00bf383e7f8596de07e68bd9307130aaf0b5d807635f20601d74af" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="901c918fae9a8e0370104b5d56bf23f43d4a0178f2c01f194c2cbeb29ba21fa9" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="33d6547a70066e3253a4e05709897203ed5f3c5fce7464a99b4f8e34877d87dc" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="1daf09f45635cc7c8771dbd1f21dcd4affe530b7f3829c58d9259a11571213e5" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="adf3f67dfa4b23bdfbe7c90ee9dcf7b22fc45ef06eebe9b180ab7741ce774ef4" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="4e4fc9ee9ad0cd544b01b107ebbccbc2fd7639ba1d5725a8c87e7e798817f768" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="9ea74449d7e9fd9ef90abf2eab1311b9ca78301b3d6090f1d22f25c8407eb7b0" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="e915a4755255bb63c64de0b1675d2452890cfbea9b7ce55b968100248a773ee4" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="04974068221f5ef95e5bd7ec7848937b50d54f46ce6f365a8d28c1cdc080e1f5" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="329b6698b158c1f8004cc260ec6a51b44b58ef8145380c9f49de8a2dfefea0b2" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="0c32d2488cc8531919c7ae02ac286104c91c420f5e5136d631a892032a703cd8" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="5f919b66f754f12e600827410879c3f5b516888e3d9ce696689a8abe37b3f52c" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="73dd805cafae7c5f717fe027f2245d3fe27e683379099f149692f1ccb0d519f5" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="6aac5c13fff281038ba0a8eea2d99961e52a4ddcd79d627a08bd6e55d974e685" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="856b397df2239accf223cd1ce859e2cf1842bbc3eb09b9293fc32e8f14e05501" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="d894140feba853c7b458df272fd5ec398da1dbc3899e574d6a1d9897d9b42385" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="c7c17b88187d5fa0a7c7092a0ec5253f4c8a008b0a81f22c4735d16aa4dd51a9" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="8f49b49e616ab23f1b53b4515773b9b72344f3779d23f07dc553f539b75785aa" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="40bd2dc8466c3646ac921206b6440c43985fa590da70b75b2b85ccb7b28e340d" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="e0461c4f88e84459b9c53ac3057da34619adc224412f71f7519584ecc0503d82" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="ac7a4f51ec891389a998e75419cb11abe32ee9fc979262072fa94b3d92601837" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="cabbea12bc3fa03a5418cf3b8e00055afa7676ff149f396e712ab8e4932317ca" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="3db8e59b8080df7b715e1f7a298db4461d91130f089d1f8ad14485e5600b7eba" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="bad13aba349cd3c4d67b24258f049b2f40f944daecf79ca8b8936f8ddb8b4e0e" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="114b1377dff4695f4a4275968995d1c0d75ea4b5b2a377aac95d9d876ceb328d" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="1ee65515e943238b12214e6b122dcdd472170863ac8b6158d867ac63ead20e91" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="efe672a0512caaf861cc658f187cbf39db8a3a056f7c16b11fba2332903b01ea" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="dd809b113ade64fd38027303f7694cc5dcc3f674480fce474d3fff6a09c43835" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="aa335a08ebb2806b2275a1230464bfd759aea87914cb4f0b7e7b9f3db423c9f2" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="1c5144fee87d4d54419cde0743f740dfbcd6cadf985e75ef7945af9afbb3dbab" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="a4dbe3ec14db17e047b5f67d794cf443ca3c3410a47a2a1c72f2d2f8a27bbc9e" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="0d8b133bde071a4afbf5da0fc7e282b6edd9a3125e7acc5b94b83be5f27bc4ae" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="dbe5612b4c83b70206a5028b78c2500229d185e7bb255f219e591a4db8a97b2b" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="923c2795125c81a1abc9fd538a6df86bd0d7761e925ca14cb0dfd52a6aafb808" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="c6f198d08627b2fdc78df87b09b9a777d00836f911b88e988b990d8c7da85b75" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="cab26a82a46b28a6fa68b17ea1e5a7109a7435b66eec91f460cf427e3d5f7441" name="kexec-tools" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="238448c46a2a031206148d6742d4d0b25f88bcae2e9bb797d6f07b88e52857f5" name="kexec-tools" arch="src">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="aba51ff02a119ca6a3a36625a3b9e9d0c82fd8a83248b1d1a69078f6a806d92e" name="kexec-tools-anaconda-addon" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="c17b4e93e63d10866fad5a83e7a4c9934b9c1509150f0dcfa99a01068fd5652d" name="kexec-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="b146cf163cca245c0d3538d6ef3ce301bd092a9ab63c9bc28ab620162ecc7761" name="kexec-tools-eppic" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="13.el7"/>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-3" date="1509710400">- makedumpfile: x86_64: Take care of init_level4_pgt rename in kernel
- makedumpfile: ppc64: get the info of mem reserved for crashkernel
- makedumpfile: Fix SECTION_MAP_MASK for kernel &gt;= v.13</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-4" date="1509710401">- Update kdump anaconda addon: fix the md5sum in source file
- Update kdump anaconda addon</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-5" date="1510142400">- Revert "Update kdump anaconda addon"
- Revert "Update kdump anaconda addon: fix the md5sum in source file"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-6" date="1510315200">- Fix KASLR problem on sadump</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-7" date="1510574400">- mkdumprd: apply dracut "--hostonly-cmdline" and "--no-hostonly-default-device"
- Change dump_to_rootfs to use "--mount" instead of "root=X"
- kdumpctl: move is_fadump_capable() to kdump-lib.sh
- module-setup: fix 99kdumpbase network dependency
- mkdumprd: change for_each_block_target() to use get_kdump_targets()
- kdump-lib.sh: introduce get_kdump_targets()
- kdump-lib.sh: fix improper get_block_dump_target()
- kdumpctl: remove "root=X" for kdump boot
- kdumpctl: fix a bug in remove_cmdline_param()</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-8" date="1510660800">- kdumpctl: Error out in case there are white spaces before an option name</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-9" date="1511956800">- makedumpfile: Fix 'kernel_version' variable being uninitialized &amp; introduce minor reorganization
- makedumpfile: Fix segmentation fault when using --split on a vmcore
- dracut-module-setup.sh: check whether to include multipath-hostonly or not</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-10" date="1512993600">- kexec-tools.spec: require dracut &gt;= 033-522 to make 99kdump module installed correctly
- kdump.sysconfig.ppc64(le): remove "root=" param from ppc64(le) 2nd kernel's command line
- Revert "kdumpctl: sanity check of nr_cpus for x86_64 in case running out of vectors"</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-11" date="1513080000">- dracut-module-setup.sh: temporary install /bin/grep to work around dracut's bug
- kdump.sysconfig/x86_64: Add nokaslr to kdump kernel cmdline
- kdumpctl: skip selinux-relabel for dracut_args --mount dump target</changelog>
  <changelog author="Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-13" date="1518091200">* Thu Feb 1 2018 Pingfan Liu &lt;piliu@redhat.com&gt; 2.0.15-12
- makedumpfile/sadump: Fix a problem of PTI enabled kernel
- makedumpfile: Fix physical-to-virtual conversion in 'exclude_segment()'</changelog>
</package>
<package pkgid="635cc62dab48bdebd6cdb757b49b0328e36f1e2976e20e9e082e970249906605" name="kpartx" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="713484c109b63a0845fc52fd7232ff66a40865416b908748c16c6a9d34341cab" name="libatomic" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="37029cc474ca7e1f2c54fce6176b953d598f2be631af86dc40b069e4ef4ea769" name="libatomic-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="40c562950aca429bcc1015afd595d07913f807d3ea2b2a9f019d11ef47c582ef" name="libblkid" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="6fcfd1b2b8db999042ce9e15f8010634f50a726332ae4c7848b4b62a876b2274" name="libblkid-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="64a06c4ccec5f835687d260a4103d0d8d036e561db68fe0849f6fd03ea1c739d" name="libcmocka" arch="ppc64le">
  <version epoch="0" ver="1.1.1" rel="0.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.0-1" date="1474459200">- Update to version 1.1.0
    * Added support to catch multiple exceptions
    * Added support to verify call ordering
    * Added support to pass initial data to test cases
    * Added will_return_maybe() for ignoring mock returns
    * Added subtests for groups using TAP output
    * Added support to write multiple XML files for groups
    * Improved documentation
    * Fixed XML output generataion
    * Fixed Windows builds with VS2015</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.1-0" date="1491566400">- Update to version 1.1.1</changelog>
</package>
<package pkgid="59116de5e4ce333b85ccfd1585d399f4fe2702a57cf09bda363a7c9ef8e58f43" name="libcmocka-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.1" rel="0.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.0-1" date="1474459200">- Update to version 1.1.0
    * Added support to catch multiple exceptions
    * Added support to verify call ordering
    * Added support to pass initial data to test cases
    * Added will_return_maybe() for ignoring mock returns
    * Added subtests for groups using TAP output
    * Added support to write multiple XML files for groups
    * Improved documentation
    * Fixed XML output generataion
    * Fixed Windows builds with VS2015</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.1-0" date="1491566400">- Update to version 1.1.1</changelog>
</package>
<package pkgid="8644f5c06b77e280f85c697e5001c2afc2372460bfd863c4ad03ed43c85e3fe1" name="libcmocka-static" arch="ppc64le">
  <version epoch="0" ver="1.1.1" rel="0.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0.2.0-4" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-1" date="1370433600">- Update to version 0.3.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.0-2" date="1373457600">- Update to version 0.3.1.
- Fixed cmocka issues on big endian.
- resolves: #975044</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.3.2-1" date="1383739200">- Update to version 0.3.2.
- Include API documentation.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.0-1" date="1397217600">- Update to version 0.4.0.</changelog>
  <changelog author="- Andreas Schneider &lt;asn@redhat.com&gt; - 0.4.1-1" date="1401105600">- Update to version 0.4.1.</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.0-1" date="1424088000">- Update to version 1.0.0:
  * Added new test runner with group fixtures. The old runner is deprecated
  * Added an extensible message output formatter
  * Added jUnit XML message output
  * Added subunit message output
  * Added Test Anything Protocol message output
  * Added skip() command
  * Added test_realloc()
  * Added a cmockery compat header
  * Fixed a lot of bugs on Windows</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.0.1-1" date="1426161600">- Update to version 1.0.1:
  * Added a macro for assert_ptr_equal().
  * Fixed test_realloc() if 0 size is passed.
  * Fixed objects packaging bug.
  * Fixed building with newer gcc versions.</changelog>
  <changelog author="Jakub Hrozek &lt;jhrozek@redhat.com&gt; - 1.1.0-1" date="1474459200">- Update to version 1.1.0
    * Added support to catch multiple exceptions
    * Added support to verify call ordering
    * Added support to pass initial data to test cases
    * Added will_return_maybe() for ignoring mock returns
    * Added subtests for groups using TAP output
    * Added support to write multiple XML files for groups
    * Improved documentation
    * Fixed XML output generataion
    * Fixed Windows builds with VS2015</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.1-0" date="1491566400">- Update to version 1.1.1</changelog>
</package>
<package pkgid="736f6a49b7285c446c9a476f1d0285e45369de6af2a451a184f7239a9ac3994e" name="libcom_err" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="919f0ff2e109fea9840b8761eed7efda49030ab1b8ee7fbdb01cca8a655ef297" name="libcom_err-devel" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="7ffa17a16c4939981d4df6f05f053fc956b8a96b30f31ee9c1939d40a05296f8" name="libdmmp" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="fe8e309010446a07b40420af06d596877083fe69a406a7250cb804ce7c6e3ac1" name="libdmmp-devel" arch="ppc64le">
  <version epoch="0" ver="0.4.9" rel="119.el7_5.1"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-111" date="1494849600">- Remove 0217-RHBZ-1437329-blacklist-oracle-devs.patch
  * Incorrect change, and the bug is already fixed.
- Move 0218-RHBZ-1448576-3PAR-config.patch to
  0217-RHBZ-1448576-3PAR-config.patch
- Resolves: bz #1448576</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-112" date="1505822400">- Modify 0191-RHBZ-1169168-disable-changed-paths.patch
  * man page fixup
- Modfiy 0197-RHBZ-1394059-max-sectors-kb.patch
  * man page fixup
- Modify 0205-RHBZ-1416569-reset-stats.patch
  * man page fixup
- Add 0218-RHBZ-1459370-add-feature-fix.patch
  * handle null feature string
- Add 0219-RHBZ-1448970-fix-resize.patch
  * if the resize fails, try to resume again with the old table.
- Add 0220-RHBZ-1448223-fix-kpartx.patch
  * gracefully fail when run on something other than a file or block device
- Add 0221-RH-harden-files.patch
  * change build parameters to use position independent code
- Add 0222-RHBZ-1457288-fix-show-maps-json.patch
  * handle running "show maps json" with no multipath devices present
- Add 0223-RHBZ-1452210-unpriv-sgio.patch
  * add unpriv_sgio configuration option to set unpriv_sgio on multipath device
    and paths
- Add 0224-RHBZ-1452210-prkey.patch
  * allow setting reservation_key to "file" to set and read keys from
    prkey_file. Also add new multipathd commands to modify the prkey file.
- Resolves: bz #1459370, #1448970, #1448223, #1457288, #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-113" date="1505908800">- Modify 0224-RHBZ-1452210-prkey.patch
  * fix errow with telling multipathd to set prkeys
- Add 0225-RH-udevdir.patch
  * fix rpmdiff complaint about udev rules installation
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-114" date="1507032000">- Add 0226-RH-allow-overrides-section.patch
  * This is a dummy section that exists to help the transition to RHEL8
- Add 0227-RHBZ-1465773-fix-path-delay-msg.patch
- Add 0228-RHBZ-1464634-hauwei-config-update.patch
- Add 0229-RHBZ-1467987-poll-on-udev-monitor.patch
  * Do poll first, so udev_monitor_receive_device doesn't return error when
    there is no uevent
- Add 0230-UP-allow-invalid-creates.patch
  * Allow creation of devices with no valid paths.
- Add 0231-RHBZ-1458852-delay-readying.patch
  * Add ghost_delay configuration option to delay device activation when only
    ghost paths exist.
- Add 0232-RHBZ-1456955-property-blacklist.patch
  * Add the "property" blacklist type.
- Resolves: bz #1456955, #1458852, #1464634, #1465773, #1467987</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-115" date="1507636800">- Add 0233-RHBZ-1451852-1482629-nimble-config.patch
- Add 0234-RHBZ-1500109-doc-typo.patch
- Remove old triggerun scriptlet (bz1470384)
- Resolves: bz #1451852, #1470384, #1482629, #1500109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-116" date="1509451200">- Add 0235-RHBZ-1480638-NVMe-support.patch
  * adds support for multipathing NVMe devices
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-117" date="1510833600">- Modify 0235-RHBZ-1480638-NVMe-support.patch
  * remove overly-restrictive uevent filtering
- Resolves: bz #1480638</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-118" date="1510920000">- Modify 0224-RHBZ-1452210-prkey.patch
  * Improve error checking for mpathpersist
- Resolves: bz #1452210</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119" date="1517400000">- Add 0236-RHBZ-1525348-fix-msg.patch
  * reduced message serverity level
- Resolves: bz #1525348</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; 0.4.9-119.1" date="1532433600">- Add 0237-RHBZ-1607749-add-transport-blacklist.patch
  * and new blacklist option, "protocol"
- Resolves: bz #1607749</changelog>
</package>
<package pkgid="c0d2f28202bc067f4f43547758afd83e205d67d4db692f35b64bb21bb1208037" name="libepoxy" arch="ppc64le">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="0916383cb5e72765bc4a54b16ea8b1888c75532fedcef5b433c607bf119e8cf3" name="libepoxy" arch="src">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="830ecfcf36421a8c8997570dc676aa53fe0865508ae19634e558872e333290c7" name="libepoxy-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="06f2c60672fb77aae1b98925e63dd59bf69c224f8089e2368839e99a75f49d6e" name="libepoxy-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.1" rel="2.el7_5"/>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.1.20140307gitd4ad80f" date="1395921600">- initial git snapshot</changelog>
  <changelog author="Dave Airlie &lt;airlied@redhat.com&gt; 1.2-0.2.20140411git6eb075c" date="1397217600">- update to latest git snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.3.20140411git6eb075c" date="1402142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2-0.4.20140411git6eb075c" date="1408276800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 1.2.0-1" date="1413201600">- Update to 1.2 GA
- Don't fail build on make check failure for some architectures</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; 1.2-2" date="1427284800">- Fix description to not talk about DRM
- Sync some small bugfixes from git</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.1-1" date="1485518400">- libepoxy 1.3.1</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.3.1-2" date="1523448000">- Prevent crash in epoxy_glx_version if GLX is not available
Resolves: #1566101</changelog>
</package>
<package pkgid="f5256b00d1ae051505f1dfbaaf5f919d1a0aec7a95ca2ddb6dfa20c9725712fc" name="libgcc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="bbb2df2e75663d10a653959afafe9b2e427bf1f8191dd5b7ea12815044b7ab4c" name="libgfortran" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="705b6c9b121c80e7e874eeb7c906228e3ed79c1fd2da28e5ed15b02d7f70ef54" name="libgfortran-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="4e2d76f428fdf5dd3b2284f500e73cff0c2aea97a5062cef2e76a35ff1f69057" name="libgfortran4" arch="ppc64le">
  <version epoch="0" ver="7.2.1" rel="1.2.1.el7_5"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-2.1.1" date="1489579200">- also include the libquadmath subpackage</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-3.1.1" date="1489752000">- drop libquadmath and rename libgfortran to libgfortran2</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.1.1" date="1490011200">- also build on aarch64
- drop libitm
- only enable libatomic for aarch64</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.0.1-4.2.1" date="1495627200">- also build on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.1.1" date="1496664000">- rename libgfortran2 to libgfortran4
- update from Fedora gcc-7.1.1-2.fc27</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-1.2.1" date="1497268800">- remove libquadmath.so.* so that it doesn't end up in debuginfo</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.1.1" date="1497528000">- bump gcc_release (DTS7 gcc-gfortran requires libgfortran4 &gt;= 7.1.1-2)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.1.1-2.2.1" date="1497960000">- don't run make check with -fstack-protector on ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.1.1" date="1508414400">- update from gcc-7.2.1-1 (#1477224)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 7.2.1-1.2.1" date="1522929600">- Add support for DEC formatting extensions (#1564043)</changelog>
</package>
<package pkgid="503d38139c19dbe2d52faed3bd1045cee36c010da1775f51092142496784aefb" name="libgnat" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="2040a035acc441dce34328c536fcb0133a256c4136564a4596cb40044cc8c28e" name="libgnat-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="e7cda238d76cebed0e9f97e274814834564c7878325aad8f49e03d7ab972fe8b" name="libgnat-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="1ece6634ca1740f6a75aeadcbcbd71d3cf156b335bbb295b12024be7456c1b3e" name="libgo" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8626a724190274202192c6d9d758ecdf1c05061c9c91b5d7ac4929ae9e3f1688" name="libgo-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="ede2f15c3eafae175e5e10071328703f3c7471ca2ad893be0e4ff6d0a1ce0e71" name="libgo-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="bb8f919e121e23cef6286c79cd0efc28ae26643d32e26a6663aa79f5457946ae" name="libgomp" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="a5c663a656e82b4c899cbd568d84ff442dcbbbf94e75082a34dd30d79104276e" name="libgudev1" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="32c345bd64115cb0510ee07a8530c5558700e5e7b03154ad6b25a20fd560cd9e" name="libgudev1-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="6fad944b4cfdf537e4a08dc8ae32415e3873d6ca84cd505ae54fec216fa2dc12" name="libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="175d7039cbd272426d8cc0b82437941e4274558eb2f2888bb93ec63b92a7bd26" name="libguestfs" arch="src">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="8cde470487371e29a8447649f966900132bca746a66443e5ce4f6b7b1d20c566" name="libguestfs-bash-completion" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="62b78f6b4d82699d534356d0c049dd6f82641deeb5f68abca9eb7d4e89f8f837" name="libguestfs-debuginfo" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="d51cb68e4d0792f1952d3991a31d47dd29d1d45939e283a9d35e47897df489ac" name="libguestfs-devel" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="3ef3f144b7f2aaaf33d490106507c38b72986876a587fd98e7a70616e04d4d5d" name="libguestfs-gobject" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="c50b446800040b38f14fc1564c188b8aa94adb7b2d08d112002ec7cff0d6f02b" name="libguestfs-gobject-devel" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="8ddace646bfe49094ff65ffa72ef916441f107be029b010a493aede5b067d5a3" name="libguestfs-gobject-doc" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="e5053a1c48ca07e2e2400005693cf9aca8297c4c007700688335a17cca37d98d" name="libguestfs-inspect-icons" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="b516d8c2383c89c665782ab60503be1cc1b752076be1c501424abc6471bc5a3a" name="libguestfs-java" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="4d931a2946cb1d7ad0a3d11671c7ace068325e2479dd7c17f18c9ae8d5ce686d" name="libguestfs-java-devel" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="0650c5fbc1494df93c6ad9e87cbdc9d15c991fbb4bab0c918a64a709373b3612" name="libguestfs-javadoc" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="73e4dad43e81c33e6293d6ae104fc391359ce3cf58e5d8882b3214296dd246a1" name="libguestfs-man-pages-ja" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="d2bde163414f92bddff246f79f13c8a5dccb772b6784004bae6ecfb54652a2b8" name="libguestfs-man-pages-uk" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="35c9fc19d74fbf1185a561c65a24e1af8fb6c9c9f84ef6dfb04dd3f491fe59b6" name="libguestfs-rescue" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="c2428e019d4255876703d1ce2f1b84fa9b6209ea272721bac859ff0e3342220d" name="libguestfs-rsync" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="29f4bf170b5a32b0b9e38b1452964fd620f3ccae4d708feba39382b69c06731c" name="libguestfs-tools" arch="noarch">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="13c7452944426eeed5931a131e5e0f63525e932f3f610ae88de06ba6bc3be536" name="libguestfs-tools-c" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="ed1d29b8d510ec9f412ac1f38101ea1dfd8b90e6bca137efeeb49bb41e31c015" name="libguestfs-xfs" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="1ea577bf4c84d93016e8902f66fd05d1875f4c330e23ea5e2fd114df0a78b762" name="libibcm" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="f05df153b07c5fce7e366a081b81d6b47a858ae2608c0141187e3d2df1e9304b" name="libibumad" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="7f44bd43833b3ad965400d87de2fba1408ab0df5513031927a2667201a2f89aa" name="libibverbs" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="b6d51f06f6edd37c10899e78d834a0a552eb31af45168f743670f808f8266e71" name="libibverbs-utils" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="467ac0987043636b4dad2c5a92037f185a1fce1608ff870ebc0abef9ffd9f48a" name="libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="ba3ee08712dfb5125dd1acd1bbf3a0a396d433acb09ab32e1fc99bc86f333957" name="libipa_hbac-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="bfb91e34c97a9af4feb86311d93d5fc013262241c46f51442216ba0f9e7c7500" name="libitm" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="381ed3b7503d9087d10215fadb341d3736b7b1f913aa4ae76d2c14d8e56bab5c" name="libitm-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="cdaa3ab40e5a3efe1e3f0813d809b603e20a8623d7e4209dc7cc5800c0b97d56" name="libitm-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="8bf9112bcc80e07fcef8fb5ec4f9dd1b99ea1a6af552146ed4d770cd4f5afa12" name="libmount" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="535c93c2f2932f16d5f1eada36436ffcad5c2bdbf5e5a1456494ee417919be0f" name="libmount-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="c28a4de9aa83628e23fcdc0cc1fa479cbe7a7ca413cc03f6d5c5202ff2f9fa90" name="libmudflap" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="57eabff24e2d00c760678bfbf6fc516486cb8e5ce9af4cbe2bc8976b6c83c37e" name="libmudflap-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="62e19e915f85081210838d5b762f622479920ed9ec1e70893f14df43d3a1ff42" name="libmudflap-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="f116998d4c2820c934088feb491560e2f544fa1ee649500208565b5dc2bf06f7" name="libobjc" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="32eb68ea78eb0a4b3336f29be6f08320c66729d4aac5694d62a48adf17e484c4" name="librdmacm" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="ac5d94e6c7a23ca1395d0d73a83456aa5f8e76e7f6926e924a83234452ddc37c" name="librdmacm-utils" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="279e7e775b82b4a04bb4fc70656bc763efef434fea7e3d98aa45563cbf559f47" name="libreswan" arch="ppc64le">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="729f7427408ffb51a4eef8a68dac8df2ddf4e7303f77820d3945249fa8d5e0cd" name="libreswan" arch="src">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="34ae938bec7b19fa6fa1322256eb25562dd4e1d62a0758f382796e959dd17c85" name="libreswan-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.23" rel="5.el7_5"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-2" date="1509451200">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555)
- Resolves: rhbz#1372050 RFE: Support IKE and ESP over TCP: RFC 8229</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-3" date="1510833600">- Resolves: rhbz#1475434 Add support for AES-GMAC for ESP (RFC-4543) to libreswan
- Resolves: rhbz#1300759 Implement RFC-7427 Digital Signature authentication</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-4" date="1512043200">- Resolves: rhbz#1463062 NIC-card hardware offload support backport</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.22-5" date="1513080000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1375776 [IKEv2 Conformance] Test IKEv2.EN.R.1.2.2.1: Receipt of retransmitted CREATE_CHILD_SA reques failed
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated for libunbound syscalls]
- Resolves: rhbz#1300763 Implement draft-ietf-ipsecme-split-dns for libreswan</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-0.1.rc4" date="1515672000">- Resolves: rhbz#1471763 RFE: libreswan MOBIKE support (RFC-4555) [client support]
- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support
- Resolves: rhbz#1492501 Reboot or 'systemctl stop ipsec' brings down _ethernet_ interfaces on _both_ ends of ipv4 ipsec tunnel
- Resolves: rhbz#1324421 libreswan works not well when setting leftid field to be email address
- Resolves: rhbz#1136076 After IKE rekeying Pluto sends DPD even if there is active SA</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-1" date="1516881600">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-2" date="1517918400">- Resolves: rhbz#1457904 rebase libreswan to 3.23 [updated]
- Resolves: rhbz#1375750 SECCOMP support for libreswan [updated]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-3" date="1518004800">- Resolves: rhbz#1471553 libreswan postquantum preshared key (PPK) support [IANA update]</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-4" date="1525262400">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode when RSA key is generated
- Resolves: rhbz#1574456 Shared IKE SA leads to rekey interop issues
- Resolves: rhbz#1574457 IKEv2 liveness false positive on IKEv2 idle connections causes tunnel to be restarted</changelog>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 3.23-5" date="1527249600">- Resolves: rhbz#1573949 ipsec newhostkey fails in FIPS mode [spec file only update]</changelog>
</package>
<package pkgid="0a14915dd7b7a39aa9e96f300df7fe84dd4dfaceb1489f71a7e70e8f95963344" name="libsmbclient" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="396a84454d4fa3a8e48f0e88ab546034e80a1d1814a875ce4d308183177f6a19" name="libsmbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="75a85bd2caa64828edc1bc85f810742637c417edf780bad6fb0745530ccaf827" name="libss" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="98d47c34eb0801e1a5d6fde78d926423c2fc3a6eafcc1599dbdac8138c225654" name="libss-devel" arch="ppc64le">
  <version epoch="0" ver="1.42.9" rel="12.el7_5"/>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.42.9-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; - 1.42.9-4" date="1394539200">- Fix posisble use after free in some error paths (#997982)
- Enable lazy_itable_init even if ext4 module is not loaded (#1071909)
- Remove any ocurence of ext4dev and test_fs from e2fsprogs (#1063801)
- Allow to resize ext4 file system past 16TB (#982871)
- Disable altivec instructions for libext2fs on ppc (#1074604)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-5" date="1411128000">- Various manpage updates for chattr and mount (#1053885)
- Fix resize2fs -P hang on corrupted filesystems (#1104612)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-6" date="1414152000">- Fix endian bug in extent code (#1081836)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-7" date="1421841600">- Don't require e2fsck for resize2fs -P (#1183492)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-8" date="1455883200">- e4defrag: backwards-allocated files should be defragmented (#1176785)
- tune2fs: allow removal of dirty journal with two "-f" options (#1212376)
- mke2fs: prevent creation of filesystem with unsupported revision (#1212378)
- libext2fs: prevent buffer overflows (#1293677)</changelog>
  <changelog author="Eric Sandeen &lt;sandeen@redhat.com&gt; 1.42.9-9" date="1465819200">- resize2fs: clear uninit BG if allocating from new group (#1262498)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-10" date="1489665600">- libext2fs: don't ignore fsync errors (#1405049)
- Fix nroff macro issue in chattr man page (#1429213)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-11" date="1510660800">- libext2fs: skip start_blk adjustment when stride and flex_bg is set (#1503969)
- tune2fs: edit dire warning about check intervals (#1433233)</changelog>
  <changelog author="Lukas Czerner &lt;lczerner@redhat.com&gt; 1.42.9-12" date="1521806400">- Fix 32/64-bit overflow when multiplying by blocks/clusters per group (#1553004)</changelog>
</package>
<package pkgid="21ac6f3905c3329f9bf4d0f9860d7e50182979566eb2b11db168cfca3b8a9519" name="libsss_autofs" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="33f4c4e420060e34bf16037171d1009d30fbf85ea4bf1b494c9786d021a8807c" name="libsss_certmap" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="0b61938fe5d35f9c2cb9cdd474a791b8fd7888f5ed721d19d7ac31f5a633259b" name="libsss_certmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="e5a94f4840dcab554e8d874a6c3b4ffeef7e711c79bce60029ecd2da5e39abd5" name="libsss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="007dc2edc7a8c61fd15b77275da00380882a703f50d102828454efb9851fe04b" name="libsss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="44e1b0d8e523331272fd02de6712f406d427de0f860159336a6c4e3c8c39f338" name="libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="fc52db3699933883a6999305b5f9c5bf25514799a27e13d1db1597b20c01b0b9" name="libsss_nss_idmap-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="d3fe6734e5b4035b97aa5863224dad69c068683847054776de7740966fe662f4" name="libsss_simpleifp" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="e111e32c27a06ab56753928c99891465671cca657a4b43278d0d15286f26fcf9" name="libsss_simpleifp-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="a1c890999a9d98f46a95a4b6310e0e2ae8202b038e67e98c8a64a7231c7dac72" name="libsss_sudo" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="9923b0ee9a71e5c878ddcf54d676b13676ec1d2095f37657223fbd442faeb07d" name="libstdc++" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="ca04893075afe0f036ec3302f00fba613240ce1b3b1ed8078a75a2cfa067cf9a" name="libstdc++-devel" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="74c35807ee0f1cbccfd6add9d3f4e81aa264e63d3ac35f2a8859f417f8a8e5be" name="libstdc++-docs" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="11b2929de68bf381579dff0487fc5084edc37e438eb5d6ab1678e08702611bb5" name="libstdc++-static" arch="ppc64le">
  <version epoch="0" ver="4.8.5" rel="28.el7_5.1"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-20" date="1507809600">- handle exceptions in basic_istream::sentry (#1469384)
- don't run pr63354.c on ppc (#1468546)
- ensure proxy privatization safety (#1491395)
- fix incorrect codegen from rdseed intrinsic use (#1482762, CVE-2017-11671)
- on aarch64, remove libatomic.so (#1465510)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-21" date="1508328000">- fix 27_io/basic_fstream/53984.cc
- fix for classes with bases with mutable members (PR c++/77375)
- fix handling side-effects of parameters (PR c/77767)
- fix combine's make_extraction (PR rtl-optimization/78378)
- fix gimplification of const var initialization from COND_EXPR (PR c++/80129)
- fix -A / -B to A / B folding (PR middle-end/80362)
- fix comparison of decimal float zeroes (PR middle-end/80692)
- fix __mulv[dt]i3 and expand_mul_overflow (PR target/82274)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-22" date="1508414400">- fix gcc.c-torture/execute/pr80692.x
- fix divmod expansion (PR middle-end/78416)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-23" date="1509624000">- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-24" date="1509969600">- Sync gcc48-rh1469697-13 patch to upstream (#1469697)
- Avoid probing in the red zone for noreturn functions (#1507980, #1469697)
- Avoid infinite loop if probing interval is less than guard size (#1469697)
- Fix debug information for large probing interval on aarch64 (#1469697)
- Fix ICE on ppc port with large probing interval (#1469697)

- rebuild to remove static relocations not known to older linkers (#1508968)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-25" date="1510660800">- Avoid red zone probe on aarch64 (#1469697)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-26" date="1515067200">- Avoid red zone probing for zero residual dynamic allocation (#1469697)
- Avoid bogus CFIs for probes in noreturn fucntions on x86/x86_64 (#1469697)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-27" date="1515672000">- bump for rebuild with RELRO enabled even for ppc64/ppc64le</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 4.8.5-28" date="1516363200">- Minor testsuite fixes to clean up test results (#1469697)
- retpoline support for spectre mitigation (#1535655)</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; 4.8.5-29" date="1522152000">- s390 retpoline support for spectre mitigation (#1552021)</changelog>
</package>
<package pkgid="ec3f3dc3667fd8e66075afcceffe043a40c3b653ea36a93a4e64441cce9036ec" name="libuuid" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="14be36371a11c8a7ae88621d6e0c2f20d79e85f48f78b5fa07c5591dac9d8a89" name="libuuid-devel" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="a5b52d329ad5616a9842925accf6dd18a3149daaa2a82062ca385b9935ec4f50" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="ba24ccd5d2bce14675485f1e5b5e36fde495378e25d0eeb5b370d8cf4d24c63f" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="f9c9a9f19e8f8a6fb5939a2c2d36e395f633588b6f22cf3785185da6329b49c7" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="f0c46f464642747c8c63b9f7e0cb743160f197b81d7468f247ef6fb56ba7eb06" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="352040364af8d2434eb3c8dc956281e58dd198cb954b74cbe9879ff4259098e5" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="27e2f47896f6483dfa4e457f332218c64ed73eebe5aac356cbc7153cf5769375" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="0627d1cd1b65e5396ab24da9e101002ee3949978ef747f761c7569e7ea6bb030" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="96b9869b7e9c94f640c823877b04c472af28f0158f8bcfb70080d7fe3f9a895a" name="libvirt" arch="src">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="ea91fc692a2779fce237f2ab1e20e818157318675224eb057b18d64b1c6e2847" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="f3989eef3fd4033489d2b10341126603a640ab874e3789e7ff67c7a5a74a4ba4" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="d9a144037de73a7ca03c1b245a60c306bfadfce27fd43cc5db21465f1833805e" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="38dc5f5cdacef43b4bd7688b25a79aa410729ec7af4f1e922cf4538e81c98665" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="ea2aa11217a2f527df0cb9ebccb0037b436dd70124b4cb3aa54911c53e4c7488" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="c7d25139680317353119e9065b8d0f31ee6d03b800ee7ea6896fab0a95f6f2fe" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="c48d30222cbf0d90c7cd1b8de9627fa648230973c432ecff04ef72cf15911610" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="4d676d86e3720cdc28504ecedcd6475e288eee13f39b365f1973deea6f2ac6fa" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="8a38428fef215b50875ddd2cd7591d2a1ff214dfe233ec89df0147f77fb11e26" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="65e5a5c2c237abb4f0d410407d757fc5f33ac46ec2b8ecc72d80dd8fec290463" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="5a2300f2521ce70ae43452c544cf9ccf4b133895fba473d4fc0aa5cd39bb3c5d" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="f1300cb7345698daf0cf03a176878aa1ad79dd5590432f80135c58132f03b6a1" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="8c99679cfdda56e6decd2ffce2d27736dbe954379e234bb66d4727fa0f3945b9" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="24808730153cb916ad45a692e8340807bd3a851e83a0d748efaf6504387242a1" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="6f714581e3f450d6676f75780c0d603704009f6d2ba9b89ccb6c83eece400704" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="f7767cbf0f2e7a2fd296704b186bc3dec693bf7ad57854f1c4691ef9b5afede9" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="e4f0d64b1dec53370ca99f610b775941426d157d8caaa9896e2804642bd50bce" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="ad4a81e175e8a971ba26a0b9a42f176e2cada9439736a336f0761eb1bb5035c7" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="989275d2a4a50d6906f969985631dad91af2509c69a3e1539137e8a9951f9b77" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="51406fc191063b64d9bb4ab6477a91fb36da1987e1d47eda3e713f032ada5ff9" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="3bab561a56980058c9452cd08678b257bdf5f53633dfe57cf34782358d067584" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="aa7f9f0f3ab14e516a9442d721da547e52eab25b254e4fdef7656b7b168b8f9e" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="58b4a659f824a6263e9b72896c3a9d1e0a284228fd3a0dc40f68df30bad6ccb2" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="f9fe05b81f78ab81199140495b761b4992d0a68fd383b6e12117c94008c1ec98" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="f8909fd155ba0451214a042ce92e63cbfd300ecf0dd23486ee4b115fffb6c598" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="3f0c76bdf8e990ed6c8dc375b0a3552a4606818a1e203afd50a4b95ed66acd03" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="d6b234fc8a12583bd5ccf996f60fc6adab9dedbc82f274e43ad697bea7e6a8e1" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="2c17aaf26dc4db6f1c0ed567dea6c7c38001c06fc5945c6b9cfa746b8dfc73f3" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="d39aab7e67b5ff243a62f5cb58a544f99c6e9bcbe7296af10ccedccc7b8e9018" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="60c378600feb27c0a56ed0d860b1faa17ccd356756e85f91a71f93508eaceb59" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="fa1af8fe28329d7bfe83658a54b9fe8ac55c6d603b67349f2dd04773c6bf36d6" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="7f15dcca5d5af626b78257dd7583732ab85d0842d2dd79721317792c7d6fc7b5" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="222fbdd722d9eb1f080ea010f9d564bb23a85409c0a952d16d621c459da28f12" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="21a8e5033bbecc49d13582bf083e44defe6c2018110943a75de0da8058612e9c" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="2a39ddd0d8cac053538dcf6691c7bd69d388ca3f00dc1290fa3109c85c5c6692" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="13d1e416979c87fa3c172b02d4dee16a5880663ff7edb224843f9425ba257404" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="10d0fbdb92320b9bb8bb54335296f4000fc34317a342df608e5684288646773a" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="20187703fac6e96d8d3bb63533bec24f794c6a3d5003c946312b8dc42a309f80" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="0fc00e405c870cf4680b66e2e897b095ad97c4f160727e031eacaf744f9f60e5" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="71b827f4b38ad1c3f50de85f4765436bca54a47ed48b65122fcb67c9bd74c828" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="0ca65de35fec3c014b7ca467569c7c5485e3f66ea4ce87280c544256883aa846" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="0c36bde8c5964c7e2d5553912bb399619302b14f6f6e1f4690f838d82d25ecec" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="34711b0180fe2ad529c5bc83e5695fb93d637977b1075fea19d839e54cb4e732" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="3b639528af1e9628d329c3b4203241a2acc257703a6030bc7d1a5bc3851f533d" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="b94b83cf2071a129ff37b091edabed014da9ce38d15969de7cf1d4aebe16e113" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="09abe53b29760099eeaf0d36c5a0ffb47a280101cb45300aae4d020abeba8fa9" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="e8c748fe992689e6acdb3131d2baab775c16865ca037931557be10fc1d3e077a" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="c975c8b094d12866b36ebbc518f360d725bf09f0e741e61fe79dd83cc0a983da" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="49582b86c27786a2d78207f51d921c045d5716d2b7e9e6b4e8fc6b18bf439890" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="fe7e28cda0bf195ab48557d4de69302b2957a7c4b71693d59357eb61d68f9b7a" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="0f1474d36d83498294461f299e30d163a03e2438ee83614d036badc288a332a1" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="20c9b527b96bed46cfe5b75b96f03180aa5459b5df22dc2fbf44a957a59f9fbb" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="a45c74913e5105a2c50a0e1b2009e46fc3a550616912e1007a08678e86990a9e" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="4732c776bb995f3a8947d3bc2fd388b034186102cf88322843d8d0a2fe4c2c53" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="e72c192539381c72cd98041641317f2b00f979b659d6a3f848268722ad0d52d3" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="da1c86106dd3bb4d334e15605b1352cbe2d4899f80ec069f062404e523bacd1f" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="155f01deeec7e01ca43f55de6fee81cf0ef1b4ed7211fe8249c509f8cc38803d" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="74d78de529faed70a12fb7211d22e4ccdcb91a9dc248c17fc75cf7740a5f0537" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="bf820d72fcb30f1944eb8963cb0dd394a4af6b539950637802dca6d68342325f" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="e16c383f2c3055860f8a99818a50bdb16840d61aede4bb15516db2d5e398e40e" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="d89e2af2b9098e573ff99377ed107a91b1d2b0e80bf5853681711f1a08dbe530" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="a3415435c22f69b3d3e8c42209e3616069ca6e822e5de16129c2ae1271ff5112" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="2068fec0b3d394aee26676b07c5f6e7d3dad34de1bfdd375aee44da7704fd3fc" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="44e4719b760a03e443d31c3955db96e8350a930409423c57ba1cbdce70651dc1" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="8fa3e6e4df9f0e166b47d9f80617eae5551759b22e9e78c36a71edd3a275245c" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="15b731d88d99e217932070c8b19ff69ddb17f7021467cd0e2748ab7688433e87" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="47ff6edde4e76ad32d547e4e94a1abdbd7fa787d31b155b9eba4cb78d376ccad" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="985e96a9829890d4a4e5a69fbeeca3052a8f82e12cd874ee73aceb534046d2da" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="f438316c076a8e45502e1dc3b2f63405583be687853832dd83556ab5e2e49c16" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="2136706ba47bc91161dde54d8a3e4cfea30f2c98caca3a592702baffae723c7c" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="fed5b2de46427820af43523a278e7ec8d83c4388d02a068f6fae5e80a7e390c0" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="492764043cced3fe08075babd67f598e028122cd28261d53a06e1cf844752cf7" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="92034b5f400cc8a32fb9233768e84fc91396ce7f2272b0361ee705a09b775d20" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="4f563701d148869b8bf5bb5fb4004bfc15c4db59108cc0946967f32c7fd50ae6" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="2a3f96c9fcf490036295ae5aa27ae1ee3698a0589996bd809dcfad4d6eda04ff" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="3e52f96c10ed079e350361bc8e9960cc0245375cee74c0100091374eea7751c2" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="b914af2772653b459f43be421e59c7020415429287b7083e00b39be1b9025933" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="45272aa194285dc411ac420548dacaa12abd444c206a19aa42a0317ae6d54aec" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="47c274f3b1025b345d64ee80371540ff9fc593155f1b1f508432f61417946e1a" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="a3be9190519cafd30e877d67e0922e8ae4815012624135770405ac03a968d261" name="libvirt-daemon-kvm" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="86b83edc6ab7d80d11b30f8b321fb9ad0b1513a508b9555d311281d5045a8f86" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="6b9f99b861de09957d8830b511619f089aae21c50e84b4bae885da61ae6ec233" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="b923ea2759f64c0e28fb95f8335f2c8b97e7fbc922baa8eb5a7691a277477f12" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="489f3fecfcc8a90b55a17b50abcc75dcb56a6fe3028d2c77c3fcbea127b201d4" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="6db86ca11463cbcc77766087d9ec53b4272f0dd620a105d64495e5dc9044a566" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="3875402f6793023f25b9553e4e4ee91f4af66bb2e8ff3dd0f7e7cb052024a777" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="02f3e77256f42ae703d34a1b80086ddcd9e9a135d919d7b585a0c5797f027160" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="fb0a5c3ec8af583f267d6d511f1bfc6fa8ec788f4111107a6e1e787ccec1559e" name="libvirt-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="74c21b40dba323abbb23844af94b1d6cbb6d4ff38d7cac4c2547b7b25b372f2d" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="3d15836d0065d229c9fe4b034c7eaa5f71bb995cfd695929be7fbfc5b81e0aeb" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="f074d567055b723483e6a3d51660192f3a9211a29318926614e5059dd1c5f4c0" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="03ee4f1206e8afc9e53dfce2c7cf02dbe372f5dd0e7ed6b7eede85315e30a055" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="4ea1ad6ed1b072ec089eb5ae71067082aa3228445600a99f198064bfb074f38b" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="ee354ceebbeddd5f2f9c6b4749ee5efb1d9940c32b83bd670cf41ba06601019d" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="04b8b2bd54447287b7691c61755e7529d19dcfb6980556faea4ccd6af6f0404a" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="8eed16453f7ca1442196693f631bd734e7f8654d2dcdb258aefa69f68c853d0f" name="libvirt-docs" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="33fad02cab92fc94174c3e93a5813156ecfdd37247028b45e1db45493b4c5455" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="2285b0676eeb8a7d3b336984d246c5b12f81c967ccfbae4e6efdf2a0b2ad8870" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="640896453e640bb40995bf4e769fb7ac3fd02167c13f1e7e7f72efad7796b184" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="4134584dead5a67a0c63b29e566808c870732bf7c2e080a21578c7ed578d683c" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="855cb855c859a5e0e443f8889c952cbd0d487140f5920f67c3d365db9698f007" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="5fda84308137be9aef29e8e55e40d2a7d0abf7935d2b3e180c4344bbcb3f271e" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="8831dd99011123f4188fc880acf7fe3d23e1e6605975a98dbcb6291b6b02c668" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="a0b53297cd425b5e18793c1b880de7a6fbf18495db854a5df21c7cb17fd1d57a" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="db175266a695a2d0abc09fe77b2c74e02a0253d14727c2fa4ca79c3b3f68cae7" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="aca6cb808913547eacd1cca8e7ad57f4e9cef3478d5a1a1b48d4d7b271486c0d" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="5f32e3c79157395ebc8694ed8ef393cdd50990e9399a1208afeecbcf4ad77fd5" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="6695ccd3d5d10b9ace216a2f1a924fb239c274553e97ca14039bc119afa81986" name="libvirt-login-shell" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="650dcc2cdee9a553956f9ff0a1d7a0b47319dd518eca67f2e65a430c79484f1a" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.4"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-9" date="1516708800">- qemu: Fix crash in offline migration (rhbz#1536351)
- Revert "qemu: monitor: do not report error on shutdown" (rhbz#1536461)
- qemu: Refresh caps cache after booting a different kernel (rhbz#1525182)
- qemu: Don't initialize struct utsname (rhbz#1525182)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
</package>
<package pkgid="95ab135477332c8e4037ded0c2b78b6e6fc303fdea4acd4bcee89f3a6e6f900c" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.5"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-10" date="1517400000">- storage: util: Properly ignore errors when backing volume is inaccessible (rhbz#1540022)
- util: json: Add helper to return string or number properties as string (rhbz#1540290)
- util: storage: Parse 'lun' for iSCSI protocol from JSON as string or number (rhbz#1540290)
- util: Introduce virFormatIntPretty (rhbz#1289368)
- util: Make prefix optional in virBitampString (rhbz#1289368)
- util: Rename virBitmapString to virBitmapToString (rhbz#1289368)
- util: Rename virBitmapDataToString to virBitmapDataFormat (rhbz#1289368)
- util: Don't output too many zeros from virBitmapToString (rhbz#1289368)
- util: Introduce virBitmapNewString (rhbz#1289368)
- util: Reintroduce virBitmapSubtract (rhbz#1289368)
- util: Introduce virBitmapShrink (rhbz#1289368)
- conf: Sort cache banks in capabilities XML (rhbz#1289368)
- conf: Format cache banks in capabilities with virFormatIntPretty (rhbz#1289368)
- tests: Remove executable bits on plain data files (rhbz#1289368)
- tests: Minor adjustments for test data (rhbz#1289368)
- tests: Add resctrl-skx-twocaches test case to vircaps2xmltest (rhbz#1289368)
- util: Fix leak in virStringTrimOptionalNewline (rhbz#1289368)
- Rename virResctrlInfo to virResctrlInfoPerCache (rhbz#1289368)
- util: Add virResctrlInfo (rhbz#1289368)
- conf: Use virResctrlInfo in capabilities (rhbz#1289368)
- util: Remove now-unneeded resctrl functions (rhbz#1289368)
- fixup_resctrlinfo (rhbz#1289368)
- resctrl: Add functions to work with resctrl allocations (rhbz#1289368)
- conf: Add support for cputune/cachetune (rhbz#1289368)
- tests: Add virresctrltest (rhbz#1289368)
- qemu: Add support for resctrl (rhbz#1289368)
- tests: Clean up and modify some vircaps2xmldata (rhbz#1289368)
- resctl: stub out functions with Linux-only APIs used (rhbz#1289368)
- util: Check for empty allocation instead of just NULL pointer (rhbz#1289368)
- util: Use "resctrl" instead of "resctrlfs" spelling (rhbz#1289368)
- util: Make it possible for virResctrlAllocSetMask to replace existing mask (rhbz#1289368)
- util: Remove unused variable in virResctrlGetInfo (rhbz#1289368)
- util: Don't check if entries under /sys/fs/resctrl/(info/) are directories (rhbz#1289368)
- util: Add helpers for getting resctrl group allocs (rhbz#1289368)
- util: Use default group's mask for unspecified resctrl allocations (rhbz#1289368)
- util: Don't overwrite mask in virResctrlAllocFindUnused (rhbz#1289368)
- qemu: Restore machinename even without cgroups (rhbz#1289368)
- util: Extract path formatting into virResctrlAllocDeterminePath (rhbz#1289368)
- qemu: Restore resctrl alloc data after restart (rhbz#1289368)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
</package>
<package pkgid="9fc3fa183e29e22a61f274a63f89965a7eb2285160f63069c9290fb5ecf84490" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.6"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-11" date="1517572800">- qemu: migration: Refresh device information after transferring state (rhbz#1463168)
- qemuDomainRemoveMemoryDevice: unlink() memory backing file (rhbz#1461214)
- util: Fix possible leak in virResctrlAllocMasksAssign (rhbz#1540817)
- util: Clear unused part of the map in virBitmapShrink (rhbz#1540817)
- tests: Add test for properly removing cachetune entries (rhbz#1540817)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
</package>
<package pkgid="5fe1b0b18c3886c0c664d3c48ecbc51472ff9809343a1cf548660c66ac53d9f4" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="3.9.0" rel="14.el7_5.7"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-12" date="1518004800">- util: Check if kernel-provided info is consistent with itself (rhbz#1540780)
- qemu: Refresh capabilities when creating resctrl allocation (rhbz#1540780)
- qemu: Expose rx/tx_queue_size in qemu.conf too (rhbz#1541960)
- util: bitmap: Fix value of 'map_alloc' when shrinking bitmap (rhbz#1540817)
- qemu: driver: Extract vcpu halted state directly (rhbz#1534585)
- qemu: Remove unused 'cpuhalted' argument from qemuDomainHelperGetVcpus (rhbz#1534585)
- qemu: domain: Store vcpu halted state as a tristate (rhbz#1534585)
- qemu: Limit refresh of CPU halted state to s390 (rhbz#1534585)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-13" date="1518523200">- Revert "qemu: Expose rx/tx_queue_size in qemu.conf too" (rhbz#1541960)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14" date="1520424000">- conf: move 'generated' member from virMacAddr to virDomainNetDef (rhbz#1529338)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.1" date="1521028800">- virDomainDeviceValidateAliasForHotplug: Use correct domain defintion (rhbz#1554928)
- conf: Check for user aliases duplicates only (rhbz#1554962)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.2" date="1521547200">- virDomainDeviceDefValidateAliasesIterator: Ignore some hostdevs (rhbz#1558655)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.3" date="1523620800">- qemu_cgroup: Fix 'rc' argument on virDomainAuditCgroupPath() calls (rhbz#1564996)
- util: Introduce virStringListMerge (rhbz#1564996)
- util: Introduce virDevMapperGetTargets (rhbz#1564996)
- qemu_cgroup: Handle device mapper targets properly (rhbz#1564996)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.4" date="1523620801">- lxc: Drop useless check in live device update (rhbz#1557922)
- Pass oldDev to virDomainDefCompatibleDevice on device update (rhbz#1557922)
- qemu: Fix updating device with boot order (rhbz#1557922)
- conf: Fix crash in virDomainDefCompatibleDevice (rhbz#1557922)
- vmx: check for present/enabled devices earlier (rhbz#1566524)
- vmx: allocate space for network interfaces if needed (rhbz#1566524)
- internal: add STRCASEPREFIX (rhbz#1566524)
- vmx: convert any amount of NICs (rhbz#1566524)
- qemu: Use dynamic buffer for storing PTY aliases (rhbz#1566525)
- qemu: avoid denial of service reading from QEMU monitor (CVE-2018-5748) (CVE-2018-5748)
- qemu: avoid denial of service reading from QEMU guest agent (CVE-2018-1064) (CVE-2018-1064)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.5" date="1525953600">- cpu: define the 'ssbd' CPUID feature bit (CVE-2018-3639)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.6" date="1528200000">- logging: Don't inhibit shutdown in system daemon (rhbz#1573268)
- util: don't check for parallel iteration in hash-related functions (rhbz#1581364)
- cpu: define the 'virt-ssbd' CPUID feature bit (CVE-2018-3639)
- virNumaGetHugePageInfo: Return page_avail and page_free as ULL (rhbz#1582418)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 3.9.0-14.el7_5.7" date="1532692800">- daemon: fix rpc event leak on error path in remoteDispatchObjectEventSend (rhbz#1607752)</changelog>
</package>
<package pkgid="b4b7cb999db8866f1b2734007cbf8a6cff2ee7280e01e22de3741ac00c659826" name="libwacom" arch="ppc64le">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="d90ee0a6e39f7a1b6190a4b430545951bb0248cf870df73f2ddb74881dcb7222" name="libwacom" arch="src">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="a81cdb2f47102d33d9d0757c04b65dba48a823dd751e791ac088d94819a6def4" name="libwacom-data" arch="noarch">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="52216e1c253e4e474880dcf20a70cbe3006676c17421a8f0d09bcec3dc26598d" name="libwacom-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="34f24048bdd8dd063a6628aa8f6237bcd3b9010aea2f724e1da265aacc811a7b" name="libwacom-devel" arch="ppc64le">
  <version epoch="0" ver="0.24" rel="4.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.7.1-3" date="1373544000">- Disable silent rules</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.8-1" date="1381147200">- libwacom 0.8 (#1018428)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 0.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.12-1" date="1429531200">- Merge libwacom 0.12 from F22 (#1194848)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.22-2" date="1484913600">- Merge libwacom 0.22 from F25 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-1" date="1488974400">- libwacom 0.24 (#1401752)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-2" date="1506686400">- Update with new tablet descriptions from 0.25 and 0.26 (#1496646)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-3" date="1510228800">- Add the Pro Pen 3D (#1496646)
- Add data for the Dell Canvas 27 (#1506543)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.24-4" date="1522843200">- Add the Wacom Cintiq Pro 24 and Cintiq Pro 32 (#1551883)</changelog>
</package>
<package pkgid="0cd83317e5f1397c7e2753f90a53a5983b33ba8a8e3d78adbab24c7b235123bf" name="libwbclient" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="af7341ef1c355a64746e577209f8ac1ec36cf2c248d4885d05f4fdeb0475d8f0" name="libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="14ed323e645ed3ec7e96f5332886d15f073d9071c24afa6a1bc2ca5022841b9a" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20180220" rel="62.1.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="c56585eb91a54a3404de35047d247a4b04e1afe896e7414c5518fadfe86c5b86" name="linux-firmware" arch="src">
  <version epoch="0" ver="20180220" rel="62.1.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170530-54.gitdf40d15" date="1496145600">- Update to latest upstream linux-firmware image for assorted updates
- opa: HFI firmware problems with new OPA switch firmware (rhbz 1452253)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
</package>
<package pkgid="f29ad5df0a1fd063a2d533cd81f9d518c1f528b601c2be16f425c81fdf81b494" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20180220" rel="62.2.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="6a4b8f0705451242c1ecfed54a1f069fe1ae3923e2e559834b24b9e4dfcf5529" name="linux-firmware" arch="noarch">
  <version epoch="0" ver="20180220" rel="62.2.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="7c0943250777073d12e63e2072df984a4af6501541cee42e07a2f40c1ceea07c" name="linux-firmware" arch="src">
  <version epoch="0" ver="20180220" rel="62.2.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="d385fb3f7fc6ae3b6c70e480230a0c190f59c670fcfcad2a1a581af295e92e7b" name="linux-firmware" arch="src">
  <version epoch="0" ver="20180220" rel="62.2.git6d51311.el7_5"/>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-55.gitc990aae" date="1496750400">- chelsio: Pull in the latest firmware 1.16.45.0 (rhbz 1457631)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20170606-56.gitc990aae" date="1498478400">- opa: Revert switch firmware back to 0.47 (rhbz 1464629)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171011-57.gitbf04291" date="1507723200">- Update to latest upstream linux-firmware image for assorted updates
- ath10k: Update to the latest firmware released version (rhbz 1457363)
- opa: update Intel Omni-Path Architecture firmware (rhbz 1452785)
- chelsio: Pull in the latest firmware 1.16.63.0 (rhbz 1458328)
- qla2xxx: Update firmware version to 8.07.00 (rhbz 1427148)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-58.git17e6288" date="1511784000">- Update to latest upstream linux-firmware image for assorted updates
- iwlwifi: Firmware update for 3160, 3168, 7260, 7265 and 7265D WIFI devices (rhbz 1508709)
- iwlwifi: Firmware update for 8260 and 8265 WIFI devices (rhbz 1508711)
- iwlwifi: Firmware update for 9260 and 9560 WIFI devices (rhbz 1501166)
- Fixes CVE-2016-0801 CVE-2017-0561 CVE-2017-9417</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20171127-59.git17e6288" date="1514980800">- Add amd-ucode for fam17h</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-60.git65b1c68" date="1515844800">- Update to latest upstream linux-firmware image for assorted updates
- netr: Add Netronome TC flower firmware (rhbz 1518900)
- Revert amd-ucode for fam17h (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180113-61.git65b1c68" date="1516104000">- Adjust Requires(post) for functional scripting due to ucode revert (rhbz 1533945)</changelog>
  <changelog author="Rafael Aquini &lt;aquini@redhat.com&gt; - 20180220-62.git6d51311" date="1519128000">- nfp: NIC stops transmitting for small MSS values when TSO is enabled (rhbz 1542263)
- chelsio: pull in latests firmware 1.17.14.0 (rhbz 1538590)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.1.git6d51311" date="1526990400">- amd: add microcode for family 17h and update for family 15h (rhbz 1576321)</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;bmeneg@redhat.com&gt; 20180220-62.2.git6d51311" date="1528286400">- amd: update microcode for family 15h v2018-05-24 (rhbz 1585939)</changelog>
</package>
<package pkgid="f000356d02cfb5c9de14d282ab35810fd7264f1d694d151f96828aeef09cc7fc" name="logwatch" arch="noarch">
  <version epoch="0" ver="7.4.0" rel="35.20130522svn140.el7_5"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-27.20130522svn140" date="1372680000">- Remove unused patch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 7.4.0-28.20130522svn140" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-29.20130522svn140" date="1461326400">- Fix disrupted sentence in default logwatch.conf file (#1126848)
- Fix smartd copyright message needs to be suppressed again (#1162741)
- Fix Logwatch cron files not marked correctly as %config(noreplace) (#1221903)
- Fix When filesystem name is long, the disk full check fails to work (#1293360)
- Fix Should not change the case of $logdir (#1293624)
- Fix logwatch --service sshd --detail 8 does not print Kerberos summary (#1295888)
- Fix logwatch puppet-agent unknown entries (#1299181)
- Fix logwatch fails with argument list too long (#1300170)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-30.20130522svn140" date="1463054400">- Fix smartd copyright message needs to be suppressed again (#1162741)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-31.20130522svn140" date="1463054401">- remove incorrect changelog entry (Related: #1221903)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463140800">- Refix When filesystem name is long, the disk full check fails to work (#1293360)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463659200">- Refix logwatch fails with argument list too long (#1300170)
- Fix Typos in sshd service script output (#1335493)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-33.20130522svn140" date="1506945600">- SSHD log format is going to change (#1422797)
- logwatch encode=base64 generates invalid mime block (#1123093)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-34.20130522svn140" date="1511784000">- add support for systemd journal (#1504984)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-35.20130522svn140" date="1529409600">- unmatched entries after ssh changed log format (#1504979)</changelog>
</package>
<package pkgid="15a07bc6f3b8bdd371794fcdd114aff955d64dfa278a503e0272e96d4bdb92eb" name="logwatch" arch="src">
  <version epoch="0" ver="7.4.0" rel="35.20130522svn140.el7_5"/>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-27.20130522svn140" date="1372680000">- Remove unused patch</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 7.4.0-28.20130522svn140" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-29.20130522svn140" date="1461326400">- Fix disrupted sentence in default logwatch.conf file (#1126848)
- Fix smartd copyright message needs to be suppressed again (#1162741)
- Fix Logwatch cron files not marked correctly as %config(noreplace) (#1221903)
- Fix When filesystem name is long, the disk full check fails to work (#1293360)
- Fix Should not change the case of $logdir (#1293624)
- Fix logwatch --service sshd --detail 8 does not print Kerberos summary (#1295888)
- Fix logwatch puppet-agent unknown entries (#1299181)
- Fix logwatch fails with argument list too long (#1300170)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-30.20130522svn140" date="1463054400">- Fix smartd copyright message needs to be suppressed again (#1162741)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-31.20130522svn140" date="1463054401">- remove incorrect changelog entry (Related: #1221903)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463140800">- Refix When filesystem name is long, the disk full check fails to work (#1293360)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-32.20130522svn140" date="1463659200">- Refix logwatch fails with argument list too long (#1300170)
- Fix Typos in sshd service script output (#1335493)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-33.20130522svn140" date="1506945600">- SSHD log format is going to change (#1422797)
- logwatch encode=base64 generates invalid mime block (#1123093)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-34.20130522svn140" date="1511784000">- add support for systemd journal (#1504984)</changelog>
  <changelog author="Jan Syn&#xE1;&#x10D;ek &lt;jsynacek@redhat.com&gt; - 7.4.0-35.20130522svn140" date="1529409600">- unmatched entries after ssh changed log format (#1504979)</changelog>
</package>
<package pkgid="011a42c806adb59e18c6a8ca405ae88a293b694ad4321b4e3c340f13e8d22c99" name="lua-guestfs" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="2d079c0788102d380bd7149818c17ffe776f16fcfc5ec43c4fbd8f6c53ddd7d5" name="mod_auth_mellon" arch="ppc64le">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="6dd1cff0616f73bffaba57b8eb2d1c07c714e42b24a896c7694571a0736ae175" name="mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="834cf4ffb62b74f4bd92060f194e242685924bef77cb93cd28ab396670ee2bcc" name="mod_auth_mellon-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="e26cfd7f5807e41d566dfce2235bb5d8a446cb8b661154e361be3274e38bad75" name="mod_auth_mellon-diagnostics" arch="ppc64le">
  <version epoch="0" ver="0.13.1" rel="3.el7_5"/>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-1" date="1434974400">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-2" date="1439985600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.10.0-3" date="1440417600">- Rebase to upstream 0.10.0 release
- Apply upstream commits post 0.10.0 release
- Apply revised ECP pending patches,
  fix patch to pickup change in configure script that causes
  HAVE_ECP to be defined
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-1" date="1442577600">- Upgrade to upstream 0.11.0 release.
- Includes ECP support, see NEWS for all changes.
- Update mellon_create_metadata.sh to match internally generated metadata,
  includes AssertionConsumerService for postResponse, artifactResponse &amp;
  paosResponse.
- Add lasso 2.5.0 version dependency
- Resolves: #1205345</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-2" date="1460116800">- Resolves: bug #1296286
  mod_auth_mellon emits CRITICAL warning message in Apache log when doing ECP
- Resolves: bug #1324536
  Installing mod_auth_mellon causes working Kerberos authentication
  to start failing
- Add ECP.rst documentation file that was erroneously omitted</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-3" date="1485777600">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.11.0-4" date="1485777601">- Resolves: rhbz#1414021 - Incorrect Content-Type header in ECP PAOS
  Rebuilding due to missing comment in Changelog</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-1" date="1508500800">- Resolves: rhbz#1481332 Upgrade to current upstream 0.13.1
- Adds the following upstream bug fixes on top of 0.13.1:
  * ee97812 Add Mellon User Guide
  * daa5d1e If no IdP's are defined explicitly log that fact
  * c291232 Make MellonUser case-insensitive.
  * 2c2e19d Fix incorrect error check for many `lasso_*`-functions.
  * 5c5ed1d Fix segmentation fault with POST field without a value.
  * 4c924d9 Fix some log message typos
  * 93faba4 Update log msg for Invalid Destination and Invalid Audience to
    show both the expected and received values.
- Add new mellon user guide to installed docdir</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-2" date="1522324800">- Resolves: rhbz#1553854 Add diagnostic logging
- Add MellonSignatureMethod config option to set signature method used
  to sign SAML messages sent by Mellon. Defaults to original sha1.</changelog>
  <changelog author="John Dennis &lt;jdennis@redhat.com&gt; - 0.13.1-3" date="1524139200">- Resolves: rhbz#1553854 Add diagnostic logging
- Add README.redhat.rst doc, explains how to enable diagnostic logging</changelog>
</package>
<package pkgid="fba2ad4063ef6d4395afbd3ee9e1f4fe85363106d0b27cae557b71a807c98755" name="mod_ldap" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="9e6b013d9cd54cff9cd3db0c6281e41742599b12a36ff4dd9f0be868d8f19667" name="mod_proxy_html" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="fcbb7596ce0e98d691030f8e72b31e5ada96c477759f83f2c8fc6a5565daf27b" name="mod_session" arch="ppc64le">
  <version epoch="0" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="96f7becdb87abcdb980553e4ed1c7bfc5660fcdfad61a9cb15804dafe6ea0ccb" name="mod_ssl" arch="ppc64le">
  <version epoch="1" ver="2.4.6" rel="80.el7.centos.1"/>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-73" date="1507291200">- Resolves: #1499253 - ProxyRemote with HTTPS backend sends requests
  with absoluteURI instead of abs_path</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-74" date="1507550400">- Resolves: #1430640 - "ProxyAddHeaders Off" does not become effective
  when it's defined outside &lt;Proxy&gt; setting</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-75" date="1507809600">- Resolves: #1448892 - Cannot override LD_LIBARY_PATH in Apache HTTPD
  using SetEnv or PassEnv. Needs documentation.</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-76" date="1507809601">- Resolves: #1464406 - Apache consumes too much memory for CGI output</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-77" date="1508155200">- Resolves: #1440590 - Need an option to disable UTF8-conversion
  of certificate DN</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-78" date="1509451200">- Resolves: #1506392 - Backport: SSLSessionTickets directive support</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-79" date="1509537600">- Resolves: #1274890 - mod_ssl config: tighten defaults</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80" date="1515412800">- Related: #1288395 - httpd segfault when logrotate invoked</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 2.4.6-80.1" date="1527508800">- Resolves: #1560609 - httpd: active connections being terminated when httpd
  gets gracefully stopped/restarted, GracefulShutdownTimeout is not being
  honored</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 2.4.6-80.el7.centos.1" date="1530014400">- Remove index.html, add centos-noindex.tar.gz
- change vstring
- change symlink for poweredby.png
- update welcome.conf with proper aliases</changelog>
</package>
<package pkgid="01848384788b047a8b2f8e7184538a528ab5d86deafec1aac6b238e7abbb5604" name="motif" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="a223408d5611c650fb921e1270c22fd261f3865d99dd7249e15cd061b72713b6" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="f93a99b8366bbfdb1a3676d1d962607df3cd6b5a9662c26ac976c1aea1809b34" name="motif-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="5686a7529ab82bac6b69f32f1a1f5f5dc27d8b916603356b121ac1e411d04414" name="motif-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="bcce0843d7ae64445d639ff258495ba5934416d38c93bbc5d52fc46d61c2f8a3" name="motif-static" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="14.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 2.3.4-5" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-6" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 2.3.4-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-8" date="1465819200">- mwm: do not see outline of window when moving (RHBZ#1080548)
  Clone of RHBZ#997241
- Fixed rendering issues seen while scrolling window (RHBZ#1134365)
  (MotifZone bug #1654)</changelog>
  <changelog author="Thomas Woerner &lt;twoerner@redhat.com&gt; - 2.3.4-9" date="1484827200">- Fixed motif issue while navigating drop down menus with arrow keys
  (RHBZ#1396514) (MotifZone bug #1564)</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-10" date="1505649600">- Fix last commit that is actually MotifZone#1565 and removes that patch since
  it was causing more problems. Fixes MotifZone#1576.
  Resolves: rhbz#1448509</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-11" date="1505736000">- Fix cursor color leaks. Fixes MotifZone#1660.
  Resolves: rhbz#1420159</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-12" date="1510747200">- Fix label size computed wrong within form. Fixes MotifZone#1612.
  Resolves: rhbz#1510534</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-13" date="1527681600">- Fix motifzone 1665. Motif was deactivating shorcuts in cascade menus when
  closing them by mouse.
  Resolves: RHBZ#1467303</changelog>
  <changelog author="Carlos Soriano &lt;csoriano@redhat.com&gt; - 2.3.4-14" date="1527681601">- Remove redundant includes that were left by mistake upstream.
  Resolves: rhbz#1518966</changelog>
</package>
<package pkgid="a3e713bdc746140b73c6af19520fc213e8aa43e832d15cf60eb9777b2f0aaddb" name="mutter" arch="ppc64le">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="0e39d7be613beef51feaf96eaa0f83c01d1f8ea84ed9b8c84ace358753b1afb6" name="mutter" arch="src">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="5a3a6baf2c1674100871eeb03ccd1560fa84ec5f206143be5f76fa19d996ea7e" name="mutter" arch="ppc64le">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="3925048da336bb3aea2b07fb761c4c450fc629f7d4f32ee7ba7a6e21f30d0de6" name="mutter" arch="src">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="b458301e70a1c0d9ee7cab22e7dc1cab7d6a8f261036447a1c12579642fd640c" name="mutter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="305056e2cb4d2c390f1bed1a6768bd853da9d17dd107a28fc330109aa0a64912" name="mutter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="1170bafb7345c5800fa354ec14dcd8d29a399ac4fd9a2f163cd44e284582c48d" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="3.26.2" rel="14.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-5" date="1511956800">- Fix for certain multi-monitor configurations not being remembered
  Resolves: #1516404</changelog>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956801">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
</package>
<package pkgid="7493a8dd83058b69e8708ff610c82a1376715c536b46f2e020354acbfdc7190b" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="3.26.2" rel="15.el7_5"/>
  <changelog author="Rui Matos &lt;rmatos@redhat.com&gt; - 3.26.2-6" date="1511956800">- Fix a crash resizing windows while headless
  Resolves: #1516408</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-7" date="1518004800">- Fix crash during session saving
  Resolves: #1535080
- Fix XWayland prevented from starting
  Resolves: #1540986</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-8" date="1518004801">- Avoid XCloseDevice on active XI2 devices
  Resolves: #1540790</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 3.26.2-9" date="1518523200">- Fix VNC sessions
  Resolves: #1543073</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-10" date="1518523201">- Detect CLUTTER_TOUCHPAD_DEVICE on all Synaptics devices
  Resolves: #1499788
- Fix tablet pressure curve configuration not being applied
  Resolves: #1543693</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 3.26.2-11" date="1518609600">- Fix GPU memory purge error handling
  Resolves: #1542375</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-12" date="1519041600">- Apply settings on current stylus tools instantly
  Resolves: #1543693</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-13" date="1519387200">- Fix pad ring/strip modes
  Resolves: #1543633</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.26.2-14" date="1523966400">- Add support for Wacom Pro Pen 3D styli
  Resolves: #1568702</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 3.26.2-15" date="1531828800">- Fix time comparison bug causing hang
  Resolves: #1601948</changelog>
</package>
<package pkgid="a101c64a80ee8a7c25fd3150ec118e0f706fbe71b091df69579f7832f29f8670" name="net-snmp" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="b7fc49c9087a5a0db91aec02ac50e9bf6c95bc390bab868f10a47447fd538730" name="net-snmp" arch="src">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="cdd8c53274a8686edeefd33436460f199b5b7b0598eb0fdf48bca995b5180a4a" name="net-snmp-agent-libs" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="cd0f34c43e7c5453ca5a6742b8e33f0da928feb2a0446f9ff7d3f6e5446b1973" name="net-snmp-debuginfo" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="eea209cb06f41352ba569c45ce91fba58c0ef5886935dfce74bc6e795a0ccea1" name="net-snmp-devel" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="9bbd4ec6ccd009aa558008d73eec87334f590456da9bb6cc1b1bb336b7710083" name="net-snmp-gui" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="f26636b449bdd9df971d156a4da09453859fc50ca08a13e2be4f7e06adf426ee" name="net-snmp-libs" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="ebf6af7a52b37201a81396eaa4267c52943cfba80ac12eccc09012d228f2c941" name="net-snmp-perl" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="006a596134a24ccb50b93bd2928b282ccfd5988c1734c5ef516821648d35cbb8" name="net-snmp-python" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="672622e9b6cab73f0b5cd0a30e8f7b800499a2f314e1ba7b071138b953022045" name="net-snmp-sysvinit" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="c6682a9f9d1e891c59d21ababa6d339c2c16939cd764b48c5116979e2066db53" name="net-snmp-utils" arch="ppc64le">
  <version epoch="1" ver="5.7.2" rel="33.el7_5.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-26" date="1490788800">- Fixed issue with agentx disconnet crash (#1404600)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-27" date="1491220800">- Allow clients to use UDPv6 addresses without 'udp6:' prefix (#1326850)
- snmpd: Speed up ipAddressTable loading. (#1327240)
- Fixed net-snmp segfault in netsnmp_copy_fd_set_to_large_fd_set (#1327200)
- Fixed issue with net-snmp-perl dependency on net-snmp-devel (#1438875)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-28" date="1493208000">- Restored message about duplicate IP address (#1442962)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-29" date="1509537600">- Move net-snmp-config from devel package to general package (#1486733)
- Fix SCTP parser (#1329338)
- Fix strstr() crash (#1428609)
- Add support for TCP and UDP 64 bit counters (#1448082)
- Fix documentation lack for includeFile, includeDir and includeSearch options (#1464485)
- Fix wrong usage of structure iterator (#1461666)
- Fix issue with statistics from autofs (#1501144)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-30" date="1512043200">- Revert #1448082 due QA Fail and upstream nonacceptance</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-31" date="1512475200">- Add missing dependency for net-snmp-perl package</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-32" date="1516795200">- Add net-snmp as requirement of net-snmp-devel</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33" date="1522152000">- Backport upstream leak fix (#1533780)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.1" date="1522238400">- Build for z-stream (#1560965)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.7.2-33.2" date="1524484800">- Add ACFS support (#1570506)</changelog>
</package>
<package pkgid="eac0861c6775bbff966f58f68af78502e2fc5bfcaa8d8fead0356016748f5ce7" name="nspr" arch="ppc64le">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="0d99b1d007fb9f4d2c4743a040f042a345efd551ff803ec9d006a73be1a91096" name="nspr" arch="ppc64le">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="1ef3a7ce075f519c3e418b5d757f122c1be561aa7c39cb1dc736328054166d9f" name="nspr" arch="src">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="8ff9a5e3273f55ddbc4bdff6c680ab81dc6e9508a11d518a3ed396d767b9ed68" name="nspr" arch="src">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="683162c03427fa2055cc767eba79ddf0834f0b5a2511c739b43f30e83bb948b7" name="nspr-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="aae860d7ebf8128e5ccc2f953820a90096ab649f87e0c95ddce4e196d9ccd173" name="nspr-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="6da3c63e0eab19cae23c3b74105dc55288d728dbae348e89d7d723822c732846" name="nspr-devel" arch="ppc64le">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="becdcc791e2efa169e84024544ab0be6a355c9ea9f8468d1615837bd869939ab" name="nspr-devel" arch="ppc64le">
  <version epoch="0" ver="4.19.0" rel="1.el7_5"/>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; 4.10.6-2" date="1407240000">- Generic 32/64 bit platform detection (fix ppc64le build)
- Resolves: Bug 1126243 - Ensure nspr is built for 64 bit on ppc64le</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.6-3" date="1417435200">- Restore s390x related patch as it hasn't been applied upstream yet
- Resolves: Bug 1103250 - Rebase RHEL 7.1 to NSPR 4.10.6 (for FF 31)</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-1" date="1427716800">- Resolves: Bug 1200917 - Rebase nspr to 4.10.8 for Firefox 38 ESR</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.10.8-2" date="1444996800">- Resolves: Bug 1269363 - CVE-2015-7183
- nspr: heap-buffer overflow in PL_ARENA_ALLOCATE can lead to crash (under ASAN), potential memory corruption</changelog>
  <changelog author="Elio Maldonado &lt;emaldona@redhat.com&gt; - 4.11.0-1" date="1453118400">- Rebase to NSPR 4.11
- Resolves: Bug 1297941 - Rebase RHEL 7.3 to NSS 3.21 in preparation for Firefox 45</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.13.1-1.0" date="1486728000">- Rebase to NSPR 4.13.1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.16.0-1" date="1503489600">- Rebase to NSPR 4.16</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.17.0-1" date="1507291200">- Rebase to NSPR 4.17</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-0.1.beta" date="1519905600">- Rebase to NSPR 4.19 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 4.19.0-1" date="1520251200">- Rebase to NSPR 4.19</changelog>
</package>
<package pkgid="7561509749d39cd1e010c598c64edb5f715e332dd710bbab2e6ecb7e18cee298" name="nss" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="ba6d0f09352b7aef674310897e92fe19820ea6b37e1cecba06c0b8e6fc62fd98" name="nss" arch="src">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="70f71a364b1279221ac92e6946531790dca78adecbdc9682072d23a010f59b7e" name="nss-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="27100566f3f13e1b4dd2f1b4c634cc55e83a58cba4dbc53521ee089b1df92c43" name="nss-devel" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="2e84385f860f7801fa7fa34487d1a623b7e16f1c5f25f229d66bba5d8f80dcb2" name="nss-pkcs11-devel" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="cdcb495a8908f0e587f44b3402087511815ac0e5246c92d99cc1549c4be53407" name="nss-softokn" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="82d8d2292ddaea7ebe080942ccc0b245867caa6f52ee0367bdb379d780b55355" name="nss-softokn" arch="src">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="42953368ddd7215545b19e5695f9c688ffb69c57123e080698723cfe5d0eb132" name="nss-softokn-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="5d7342551b735b43639d66aea680538074b72c8c6d67f6f65b90733df7558a20" name="nss-softokn-devel" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="dbd57258e48b9f4ae57c50b976d244d13d1033f769571fe9d8b0de0e8e783754" name="nss-softokn-freebl" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="70d8dec80daaf1cf1e9f20f50fd38e66ac4e4c36ab5035cdda147feef887029e" name="nss-softokn-freebl-devel" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Update to NSS 3.34.0</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Rebuild to utilize ECC slotFlag added in nss-util</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Update to NSS 3.36 BETA
- Remove upstreamed nss-softokn-3.16-add_encrypt_derive.patch
- Remove upstreamed nss-softokn-3.28-fix-fips-login.patch
- Remove upstreamed nss-softokn-fix-ecc-post.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.2.beta" date="1519905601">- Restore nss-softokn-3.16-add_encrypt_derive.patch to add back
  support for single DES mechanisms</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.3.beta" date="1520251200">- Apply upstream patch likely to be part of the official release</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251201">- Update to NSS 3.36.0</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-2" date="1520424000">- Add KAS tests to fipstest</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1520424001">- Revert the default behavior change in filesystem probes</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.36.0-4" date="1521115200">- Clear AES key information after use</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1521460800">- Use correct tarball of NSS 3.36.0 release</changelog>
</package>
<package pkgid="b6a4e64a13f6552fba58c1aaf58e3a395aceef76e6cd497885f95bec659eb169" name="nss-sysinit" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="88d8528e217d95680e09f4e66c160178113c907bfc2f15fe19e8ce9a900d357e" name="nss-tools" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="5.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to NSS 3.34.BETA1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511524800">- Rebase to NSS 3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1515067200">- Backport necessary changes from 3.35</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-3" date="1515153600">- Temporarily disable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-4" date="1516017600">- Re-enable nss-is-token-present-race.patch</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520596800">- Rebase to NSS 3.36</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-2" date="1520856000">- Set NSS_FORCE_FIPS=1 in %build
- Revert the changes to tests assuming the default DB type</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-3" date="1522152000">- Decrease the iteration count of PKCS#12 for compatibility with Windows
- Fix deadlock when a token is re-inserted while a client process is running</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-4" date="1523620800">- Work around modutil -changepw error if the old and new passwords are
  both empty in FIPS mode</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-5" date="1524052800">- Restore CERT_LockCertTrust and CERT_UnlockCertTrust back in cert.h</changelog>
</package>
<package pkgid="67da06eae2c6a5b236f17a1abf0b134f4ea670d29ea13a78cd5292fd4b033384" name="nss-util" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="3bd7ad60df4f9bbd25a76908e95b5cddc1272da3585876c85ec33d7ae23c68c2" name="nss-util" arch="src">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="c7e01fae4583d3e4b0ae16a7e81ae9990327c13b4bebfdb48a5a711eb39fed22" name="nss-util-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="63cf09624bc0b59e886781add39c8f1a85885e74bde3a526299726979a76ccf2" name="nss-util-devel" arch="ppc64le">
  <version epoch="0" ver="3.36.0" rel="1.el7_5"/>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-2" date="1488456000">- Rebase to nss-3.28.3</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.3-3" date="1489060800">- Backport necessary constant definitions</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-2" date="1492689600">- Rebase to nss-3.28.4</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.28.4-3" date="1494849600">- Backport patch to allow empty line at the end of policy file</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.33.0-1" date="1507291200">- Rebase to nss-3.33</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-0.1.beta1" date="1509364800">- Rebase to nss-3.34-beta1</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-1" date="1511438400">- Rebase to nss-3.34</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.34.0-2" date="1516104000">- Recognize "ECC" flag in slotFlags</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-0.1.beta" date="1519905600">- Rebase to NSS 3.36 BETA</changelog>
  <changelog author="Daiki Ueno &lt;dueno@redhat.com&gt; - 3.36.0-1" date="1520251200">- Rebase to NSS 3.36</changelog>
</package>
<package pkgid="9741bc37c398660ce532dc10d01902ee92c8e66761cc7a43113f3de7dac8f1fa" name="ocaml-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="4ab4bb7e93c088b7f57a8053146870c2e3fed37cb2ccee56637dc5f35281ca4a" name="ocaml-libguestfs-devel" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="e033fb11d7062a901d398e551391f62ac1aa0ccf939b5b7eaad5cd52b58c384c" name="opal-firmware" arch="noarch">
  <version epoch="0" ver="5.9" rel="2.el7"/>
  <changelog author="Rafael dos Santos &lt;rdossant@redhat.com&gt; - 5.2.0-1" date="1463745600">- Importing package from Fedora.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-2" date="1472126400">- Resolves: rhbz#1367342
- Remove systemd socket.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-3" date="1474545600">- Resolves: rhbz#1375449</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-1" date="1484740800">- Resolves: rhbz#1384952 - [7.4 FEAT] opal-prd package update for ppc64le</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
</package>
<package pkgid="4bb3ffe0ca2ce093ae79769f729e4e98725aab070a0f96557a51d189838d271f" name="opal-prd" arch="ppc64le">
  <version epoch="0" ver="5.9" rel="2.el7"/>
  <changelog author="Rafael dos Santos &lt;rdossant@redhat.com&gt; - 5.2.0-1" date="1463745600">- Importing package from Fedora.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-2" date="1472126400">- Resolves: rhbz#1367342
- Remove systemd socket.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-3" date="1474545600">- Resolves: rhbz#1375449</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-1" date="1484740800">- Resolves: rhbz#1384952 - [7.4 FEAT] opal-prd package update for ppc64le</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
</package>
<package pkgid="eadebd8de9f0cbe841eacb75d075b47d3c4f55388b70f81097f2ecab5c20870d" name="opal-prd" arch="src">
  <version epoch="0" ver="5.9" rel="2.el7"/>
  <changelog author="Rafael dos Santos &lt;rdossant@redhat.com&gt; - 5.2.0-1" date="1463745600">- Importing package from Fedora.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-2" date="1472126400">- Resolves: rhbz#1367342
- Remove systemd socket.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-3" date="1474545600">- Resolves: rhbz#1375449</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-1" date="1484740800">- Resolves: rhbz#1384952 - [7.4 FEAT] opal-prd package update for ppc64le</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
</package>
<package pkgid="c13b2c45ba847ed023cfc4f1dfd61f2a7c37eb81aca664398159f9e9bb76557e" name="opal-prd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="5.9" rel="2.el7"/>
  <changelog author="Rafael dos Santos &lt;rdossant@redhat.com&gt; - 5.2.0-1" date="1463745600">- Importing package from Fedora.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-2" date="1472126400">- Resolves: rhbz#1367342
- Remove systemd socket.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-3" date="1474545600">- Resolves: rhbz#1375449</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-1" date="1484740800">- Resolves: rhbz#1384952 - [7.4 FEAT] opal-prd package update for ppc64le</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
</package>
<package pkgid="618c77bbaac008943406f803f37820bdaceac2598435bc0298ab35049f2b968d" name="opal-utils" arch="ppc64le">
  <version epoch="0" ver="5.9" rel="2.el7"/>
  <changelog author="Rafael dos Santos &lt;rdossant@redhat.com&gt; - 5.2.0-1" date="1463745600">- Importing package from Fedora.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-2" date="1472126400">- Resolves: rhbz#1367342
- Remove systemd socket.</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.2.0-3" date="1474545600">- Resolves: rhbz#1375449</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-1" date="1484740800">- Resolves: rhbz#1384952 - [7.4 FEAT] opal-prd package update for ppc64le</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.4.3-2" date="1489492800">- Resolves: rhbz#1430332 - Restart opal-prd daemon on any kind of failure</changelog>
  <changelog author="Rafael Fonseca &lt;rdossant@redhat.com&gt; - 5.5.0-1" date="1492689600">- Resolves: rhbz#1368702 - [Pegas1.0 FEAT] opal-prd package update</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.8-1" date="1508932800">- Resolves: rhbz#1456536 - opal-prd update to 5.8</changelog>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 5.9-1" date="1509451200">- Resolves: rhbz#1456536 - opal-prd update to 5.9</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 5.9-2" date="1516622400">- Related: rhbz#1456536 - add support for runtime OCC load/start in ZZ</changelog>
</package>
<package pkgid="77e162914ba4fdd5f72fc571f5a4c0d747b7868de275d92dcc9c9575e22a9bd5" name="openldap" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="d7cce6cb4ff9eb1257259923d954de3f2be4e3ddf7c3cec62398400e962b7b3b" name="openldap" arch="src">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="d415279b00f0fc503158827c5be643a5473e858359d86655d40d428d94676bf4" name="openldap-clients" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="691301c15a77cfec127dc2ff9f3d4565fc6b243d2424e88068b99f5d98670195" name="openldap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="6321e2bef44478e6f53e24e908de645f082786b45a0d5ee62c42cb25ca511403" name="openldap-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="6689f61ffd3aebcebed1a773309c61ee8e6f8dbb861bf07e3f945f7c4160ae7d" name="openldap-servers" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="9171e7fb1e0f97c3e37c364be9efd85acdd22b71a7a6a547ae4afbdd2f2f3b17" name="openldap-servers-sql" arch="ppc64le">
  <version epoch="0" ver="2.4.44" rel="15.el7_5"/>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-6" date="1509624000">- fix: Upgrading openldap-servers does not restart slapd when rebasing (#1479309)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-7" date="1509624001">- fix: Manpage incorrectly states ./ldaprc config file is used (#1498841)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-8" date="1509624002">- fix: Upgrading to OpenLDAP &gt;= 2.4.43 breaks server due to ppolicy changes (#1487857)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-9" date="1509710400">- Build with OpenSSL and MozNSS compatibility layer instead of MozNSS (#1400578)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-10" date="1511870400">- Drop update-ppolicy-schema.sh scriptlet's output (#1487857)
- Fix issues in MozNSS compatibility layer (#1400578)
  + Force write file with fsync to avoid race conditions
  + Always filestamp both sql and dbm NSS DB variants to not rely on default DB type prefix
  + Allow missing cert and key which is a valid usecase
  + Create extraction folder only in /tmp to simplify selinux rules
  + Fix Covscan issues</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-11" date="1515585600">- MozNSS Compat. Layer: Enable usage of NSS DB with PEM cert/key (#1525485)
  + Fix a possible invalid dereference (covscan)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-12" date="1515672000">- MozNSS Compat. Layer: Ensure consistency of a PEM dir before usage (#1516409)
  + Warn just before use of a PIN about key file extraction</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-13" date="1517400000">- MozNSS Compat. Layer: fix recursive directory deletion (#1516409)
- MozNSS Compat. Layer: fix PIN disclaimer not always shown (#1516409)
- MozNSS Compat. Layer: fix incorrect parsing of CACertDir (#1533955)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-14" date="1522324800">- MozNSS Compat. Layer: Enforce fail when cannot extract CA certs (#1563080)</changelog>
  <changelog author="Matus Honek &lt;mhonek@redhat.com&gt; - 2.4.44-15" date="1522756800">- Bump release to version 2.4.44-15</changelog>
</package>
<package pkgid="4cb0fe32849ac14546446e4f7073aedeb6a7f254d30f10f5abec8c455074f96e" name="openscap" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="3f1cdfab05badda0a820579331d922aa0d3454984a8324ecb0ecb466dbd0a549" name="openscap" arch="src">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="ade75a0c38dde35a430b70cde854da8521a0ed56ccfc3e7ca388dc9d9e8d3d6a" name="openscap-containers" arch="noarch">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="5d4fe3bf7e5764367c1c3727f5affcba4dcb83f3f562e92733cf14857199c398" name="openscap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="1304b238eaf2ce2f4a1a490ea5866ed1ce4f8e681c12d52af6a0678045417d83" name="openscap-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="ba7d406200ab549c59bf023a3419d6c0b0824a883fda8e106e21df625412c9cd" name="openscap-engine-sce" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="912ada2d45bf4b74bb3db4fc04baee5fc44a79ce2772551097f1dd7e97ff38b2" name="openscap-engine-sce-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="1ea73c521e629cd314e8b119ac64ae5d9a62a0f329b8595cc8829940381bb136" name="openscap-extra-probes" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="89e9e8e08c2bb8ee74c8eae3a9ec98cfc5d63a71df39d79ad4a5cbc30b39c691" name="openscap-python" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="346fb48cb2e8c7df1794a18398e8c54155389ca9fc4b8f4595958bbabe6fb0f4" name="openscap-scanner" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="a92cd12d2b07befac18748c19f2c447d3d0435687a751705b1a00cbe8b2d9aca" name="openscap-utils" arch="ppc64le">
  <version epoch="0" ver="1.2.16" rel="8.el7_5"/>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.14-2" date="1495195200">- RPM probes to return not applicable on non-rpm systems (#1447629)
- fixed sysctl tests on s390x architecture (#1447649)
- Revert warning by default in oscap tool, our message categories are not ready for it (#1447341)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.15-1" date="1503921600">- upgrade to the latest upstream release
- short profile names can be used instead of long IDs
- new option --rule allows to evaluate only a single rule
- new option --fix-type in "oscap xccdf generate fix" allows choosing
  remediation script type without typing long URL
- "oscap info" shows profile titles
- OVAL details in HTML report are easier to read
- HTML report is smaller because unselected rules are removed
- HTML report supports NIST 800-171 and CJIS
- remediation scripts contain headers with useful information (#1439813)
- remediation scripts report progress when they run
- basic support for Oracle Linux (CPEs, runlevels)
- remediation scripts can be generated from datastreams that contain
  multiple XCCDF benchmarks
- basic support for OVAL 5.11.2 (only schemas, no features)
- enabled offline RPM database in rpminfo probe
- added Fedora 28 CPE
- fixed oscap-docker with Docker &gt;= 2.0
- fixed behavior of sysctl probe to be consistent with sysctl tool
- fixed generating remediation scripts
- severity of tailored rules is not discarded
- fixed errors in RPM probes initialization
- oscap-docker shows all warnings reported by oscap
- fixed pkgconfig file</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-1" date="1510660800">- upgrade to the latest upstream release
- moved oscap-chroot to openscap-scanner because it's a thin wrapper script with no dependencies</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 1.2.16-2" date="1511179200">- moved oscap-docker to newly created openscap-containers.
- moved man of oscap-chroot to oscap-scanner.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-3" date="1515499200">- Update bash completion (#1505517)
- Align bash role header with output of help command (#1439813)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-4" date="1516017600">- Fix requirement on openscap-containers</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 1.2.16-5" date="1516708800">- Revert warnings by default in oscap tool (#1537089)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 1.2.16-6" date="1517918400">- Cleanup temporary images created by oscap-docker (#1454637)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-7" date="1524052800">- Use the chroot mode for textfilecontent (#1547107)</changelog>
  <changelog author="Martin Preisler &lt;mpreisle@redhat.com&gt; - 1.2.16-8" date="1524139200">- Use the chroot mode for rpm probes (#1556988)</changelog>
</package>
<package pkgid="dab0cb6203914a49ff582dd2d24337b77818e1cc15a67f919b19562484823f7b" name="openslp" arch="ppc64le">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="cd68ef28a92ea5b209a23dc22682eb5c999e1c896faa3178771be074de18b1e0" name="openslp" arch="src">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="63dcc7b7c8c35dbaccb079df948d88453201359d4f820105c314e869b64f2677" name="openslp-debuginfo" arch="ppc64le">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="ba905feae5ec642c6bb0803ad5cf9fdbe3132cab7d3a9abbde9c2f25d27d5835" name="openslp-devel" arch="ppc64le">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="1baafd00ee06470a35436ab62afede688ce34cb2507aaede51d3980fdb666db9" name="openslp-server" arch="ppc64le">
  <version epoch="1" ver="2.0.0" rel="7.el7_5"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.1.beta2" date="1311163200">- Fix N-V-R</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.2.beta2" date="1311854400">- Build with -fno-strict-aliasing</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.0-0.3.beta2" date="1368619200">- Add man pages for slptool and slpd
- Add CFLAGS and LDFLAGS for full relro</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-1" date="1372161600">- Update to openslp-2.0.0
- Add systemd support
- Require /bin/netstat</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-2" date="1373889600">- Fix -devel requires</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-3" date="1381924800">- Fix full relro
  Resolves: #881226</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:2.0.0-5" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-6" date="1467115200">- Fix buffer overflow termination of slpd with -D_FORTIFY_SOURCE=2
  Resolves: #1181474</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:2.0.0-7" date="1530619200">- Fix possible heap memory corruption, CVE-2017-17833
  Resolves: #1575698</changelog>
</package>
<package pkgid="fcf8e1fd1b57fa0862e2addce495e4af76b47135d6c5dbd361333f139c338081" name="oprofile" arch="ppc64le">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="2e6f8424f36ab6c5ff6ddb718092b3fed9f72bed773507ddefe544bd53bb30c2" name="oprofile" arch="src">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="fb35a1a733d763ddb51c46a000889c2ea7ddf872d1f265192ee45f5a0aff330d" name="oprofile-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="b810bea72ab0f57affe00868e693437597c5860cc10791143a7b25a5919d2594" name="oprofile-devel" arch="ppc64le">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="c7f8eb787da83462de184347d9a0479764398082a0b9a2928e2b5a8d9390d253" name="oprofile-gui" arch="ppc64le">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="ea07e80f98eb974baf98db24892abbe696f626192d8f42432ae3fdcb7b7ea8f8" name="oprofile-jit" arch="ppc64le">
  <version epoch="0" ver="0.9.9" rel="25.el7_5.1"/>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-17" date="1463054400">- Define some  Intel broadwell default unit masks by names
- Add support for Harrisonville (Denverton SoC)
- Add support for Skylake-SP server
- Add support for Kabylake-U/Y
- Add support for Kabylake-H/S
- Make Nehalem, Westmere, and Haswell event names unique.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-18" date="1467806400">- Store profiling data with oparchive.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-19" date="1470657600">- Allow operation /proc/sys/kernel/perf_event_paranoid == 2.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-20" date="1470744000">- Ensure that the perf events setup before ocount execs child.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-21" date="1476878400">- Fix Intel Goldmont default event</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-22" date="1490097600">- Update ppc64/ppc64le support. rhbz1385007
- Add recognition check for POWER8NV and POWER8NVL. rhbz1426426</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-23" date="1498132800">- Add power9 support.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-24" date="1504180800">- Update power9 events.</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25" date="1506340800">- Add Intel Xeon Phi support. rhbz1465354</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 0.9.9-25el7.1" date="1529409600">- rhbz1593131</changelog>
</package>
<package pkgid="841372d5dd779e751df26f1bcb54d655e14fc266a5902ca86cd02afe8ba4dc04" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="dbf6c34e9f076ee709658e3132e1c23d37e3cf720d30a9fb9f26fc522ad5bd90" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="4b34a140155788b24914f26ab695efef94a501af120d679c54770ba9287adafa" name="pacemaker" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="2269d106ec2ce3e24b473c3b5940ea22d131f936ff06e146f92db242e3ce9530" name="pacemaker" arch="src">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="192da9f9ea7e0f0591d9932f6cc4908a9e56753cf1d45405d8fff7a17bc0006a" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="6268605377da7c6187f7fee0880bbd44003b0fa4678bcb269025e66addb78f71" name="pacemaker-cli" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="b6569f1f4c416b687229c4a84cc958b9c5549ce2fcd28ac23f683e1e802c29b8" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="70784780e323f740fe8ef00357d1b53505861a4ecde02d13e0e29fac206dcdf9" name="pacemaker-cluster-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="234d469055e91d0afdef13128dfb8221a44edcfc58dafada87ba314967c11b4d" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="a5ff77966523c4e1c6fc50ed0fa9934d4b9fcac0fb429d2a764b59e452b963ea" name="pacemaker-cts" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="4579c7266f9c14e4ba83ad9779f860496f29bba375ddbf2cda49758adf3d7999" name="pacemaker-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="6c9476807d59d57d6ea83a8b2c730fbac2916abc3dd4069fa1f00b3a49dec3f3" name="pacemaker-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="78ec98d574f2248eabf527fbe09a7ae5164b59252f7faddb7fd0d7554137ae17" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="d9a0a145d87a65d1ecb68fd0b2d01d13756a81fd2d3343d4b92aa15ec530a04a" name="pacemaker-doc" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="78a78b31a3b11ddb17751ed216342e9245043cd5c7b559919aed6a2a6a6fc187" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="9187bde71b10d88f97275175f10718ff33e580b9d510db4d76578a5dc97ae90b" name="pacemaker-libs" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="2e1bdc3ed35a0fd1c8d42e172d1a69371e742e5ee459425e34b206aa654a1c7f" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="d8229f7e8d7af3d541fee05119b8dce24d4b172f50dd023d357527481f5ec525" name="pacemaker-libs-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="430ba1f5fdcde19065ca16b98fc40b74a589578c30d98d0fa0861e419fe6787a" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="a3653423e8227e9cb8437ef909ff50793cc978866288b3a6c57c4873e971fe53" name="pacemaker-nagios-plugins-metadata" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="bdd8c140ca9fa9437694c5ea78cbcc9605fb300ca5969f3874371e12bad9b51c" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.2"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-4" date="1509710400">- Rebase to upstream 1a4ef7d180e77bcd6423f342d62e05e516c4e852 (1.1.18-rc4)
- Resolves: rhbz#1381754
- Resolves: rhbz#1474428
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-5" date="1509710401">- Properly clean up primitive inside bundle
- Scalability improvements
- Resolves: rhbz#1499217
- Resolves: rhbz#1508373</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
</package>
<package pkgid="99a76baf454b12405ce4ffbf21a37cd101ae74d7138999d6cb96c1024b44962d" name="pacemaker-remote" arch="ppc64le">
  <version epoch="0" ver="1.1.18" rel="11.el7_5.3"/>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-6" date="1510747200">- Rebase to upstream 2b07d5c5a908998891c3317faa30328c108d3a91 (1.1.18)
- If on-fail=ignore, migration-threshold should also be ignored
- Resolves: rhbz#1474428
- Resolves: rhbz#1507344</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-7" date="1512993600">- Avoid node attribute write delay when corosync.conf has only IP addresses
- Fix regressions in "pcs resource cleanup" behavior
- Restore ordering of unfencing before fence device starts
- Ensure --wait options work when bundles are in use
- Fix possible invalid transition with bundle ordering constraints
- Resolves: rhbz#1454960
- Resolves: rhbz#1508350
- Resolves: rhbz#1517796
- Resolves: rhbz#1519812
- Resolves: rhbz#1522822</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-8" date="1513080000">- Regression fix for "pcs resource cleanup" was incomplete
- Resolves: rhbz#1508350</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-9" date="1513598400">- Fix small memory leak introduced by node attribute delay fix
- Resolves: rhbz#1454960</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-10" date="1516795200">- Always trigger transition when quorum changes
- Match clone names correctly with crm_resource --cleanup
- Fix pcs resource --wait timeout when bundles are used
- Observe colocation constraints correctly with bundles in master role
- Resolves: rhbz#1464068
- Resolves: rhbz#1508350
- Resolves: rhbz#1519812
- Resolves: rhbz#1527072</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11" date="1516968000">- Fix regression in crm_master
- Resolves: rhbz#1539113</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.1" date="1524052800">- Do not schedule notifications for unrunnable actions
- Do not expire remote failures if fencing is pending
- Do not consider attribute order difference as CIB change in crm_diff
- Resolves: rhbz#1563345
- Resolves: rhbz#1566533
- Resolves: rhbz#1568720</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.2" date="1524225600">- Do not record pending notify actions as completed
- Resolves: rhbz#1570618</changelog>
  <changelog author="Ken Gaillot &lt;kgaillot@redhat.com&gt; - 1.1.18-11.3" date="1528200000">- Fix regression in handling of mixed-case node names
- Avoid multiple recovery of stonith devices
- Resolves: rhbz#1583747
- Resolves: rhbz#1585741</changelog>
  <changelog author="Johnny Hughes &lt;jhughes@centos.org&gt; - 1.1.18-11.3" date="1530100800">- Added armv7hl and aarch64 to supported arches</changelog>
</package>
<package pkgid="8e04a153050a7378ac1719ec1092de11aba181dda2b9d7ddddcb3ea3312dcede" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="23695b7ee2e7c88d500a745a8684dee7b85cc9932562582fb3350e0dfd2714fa" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="ea55471dc8109f8056d8da9de4775732f38a06cb9d6b1aa8021b2b51156ac904" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="0bc58b0acc3a0eed2efa415619fb1f668860a5d5e541217d2bd72cc1c12a7790" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="8d1cda20497730238fb4c441a0e93242e00e3fb09aa8fc88de863290f86001e4" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="45534f42474ff49e6887e084b05d258b501fc139face9209711ed66954376dec" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="17229b2f6cde7cad60d2e43e800a0eea9452d758483ed9869b340aebc30ef385" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="a187fea08152a6a3cd52c98ac30f8c8ecb8326ecd64214768853c25efc188cf3" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="91588fbb96b73dc88e7b7196b0ff43c55b99442bb91bf3e6909ee07e0215a2c5" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="a3ded3746021cce4ef3183536265cdae019a35dffbedb3edcb221db3bb03bd92" name="perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="ad42fc27562941e45c0d1078007e46913b36fe818e34b834d5e925ff6983531e" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="2360178c9b659ace3867088b5e9595671181893d58c2a13184fe42713990302e" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="4415c4c109c3ac67b23dbf540f0550efc92cd96e86cbb0fc4a0597d0a7729f5b" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="ee38404fafa4fb071b8d7b4d1379bbba91ffb4ebd93b69b790fa648ca15d7e63" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="73cedc11ea5b77a24a614e681adb6edeb57c3d65cd3ddf5370a5c360a498f92a" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="17ea32fa89ad20b0af36235c47fd950ddfa3053db844aac60f8f9e45009e1668" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="e02dacdb858220efae89a4873260e90736ea0198e41f9aca05aa0ad7ee944b2d" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="13c4630de7e723807a47453c4c4a7fac3bfe86478205b081991d09afe813fc03" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="72969b9d0187eddb75ffafb6b79580f87dcbc16c282a451555594a76e52b7069" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="45c6ef6c20602bc8abda1327758ea33a8613b777b1bc9c5021dbdd4489f17f50" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="0eb5ac21c8c0149854b0743ead39071584663e05b2986fc3fddb8519251838dd" name="perl-Git" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="95c790098e664afaaa48f7e6bc08d88546abba3e47193b851d3b56febdda5372" name="perl-Git-SVN" arch="noarch">
  <version epoch="0" ver="1.8.3.1" rel="14.el7_5"/>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-5" date="1434715200">- Rename the git.service into git@.service
  Resolves #1135071</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-6" date="1446033600">- fix arbitrary code execution via crafted URLs
  Resolves: #1274737</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-7" date="1458302400">- fix heap overflow CVE-2016-2315 CVE-2016-2324
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-8" date="1458388800">- remove needles check of xmalloc from previous patch
  Resolves: #1318255</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-9" date="1487937600">- add control of GSSAPI credential delegation to enable HTTP(S)-SSO
  authentication
  Resolves: #1369173</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; -1.8.3.1-10" date="1490788800">- do not put unsanitized branch names in $PS1
  Resolves: CVE-2014-9938</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-11" date="1495022400">- dissalow repo names beginning with dash
  Resolves: CVE-2017-8386</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-12" date="1502452800">- prevent command injection via malicious ssh URLs
  Resolves: CVE-2017-1000117</changelog>
  <changelog author="Petr Stodulka &lt;pstodulk@redhat.com&gt; - 1.8.3.1-13" date="1505304000">- fall back to Basic auth if Negotiate fails
  Resolves: #1490998
- handle request-pull when multiple tags point to the same commit
  Resolves: #1192146</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.8.3.1-14" date="1529323200">- Backport fix for CVE-2018-1123
- Thanks to Jonathan Nieder &lt;jrnieder@gmail.com&gt; for backporting to 2.1.x
  and to Steve Beattie &lt;sbeattie@ubuntu.com&gt; for backporting to 1.9.1</changelog>
</package>
<package pkgid="0b755153a094124956d154bd8a53a7f9fa26557262d536881682adb34fca9523" name="perl-Sys-Guestfs" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="c935b88d2aa873b250f03ded81b1aec341c3334824318d6e446195d8894beea6" name="pki-base" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="11dc7f38ca9e7faa0fc0d95b7bbc82778cb3752055274ec35d77e7caf5c2cfa4" name="pki-base-java" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="d34ba64611464455c998002d2477aa252cee683d918563944140a8cbca7dceb7" name="pki-ca" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="fb867ecc5e27d3ae9d011be188eb035f339548b1659216d680fce3f4b7519610" name="pki-core" arch="src">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="ba98b23582f9819e51ad3c35804a4bd115cc7e2520c4ee0b8ce63ef531072ee6" name="pki-core-debuginfo" arch="ppc64le">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="e31d2d6b3cc5be71bb42f1df248cf0d4ad7c0b367810605eb4f1dd2605575c5d" name="pki-javadoc" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="bd6e6204948392111c497b530f8e1610068c859105857bb5ba22353cb1099eb5" name="pki-kra" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="5a41cfac5997a16c78245e83c1feaa56955a254b61ef58035e546b96ba56e1e0" name="pki-server" arch="noarch">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="49cc62bd42cf2b037c666cd92ee74c0033810d57205173b1a038f3a6f707bdfb" name="pki-symkey" arch="ppc64le">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="3c086bfcd2d1fd64fae230a270d5a35441396ea5b2abe18ceb6af872ca9691a8" name="pki-tools" arch="ppc64le">
  <version epoch="0" ver="10.5.1" rel="13.1.el7_5"/>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-5" date="1512993600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1466066 - CC: Secure removal of secret data storage
  (jmagne)
- Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to
  setup with CMC signed certificates (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-6" date="1516708800">- Updated jss, nuxwdog, and openssl dependencies
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  (RHEL)
- Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in
  few cases (ftweedal)
- Bugzilla Bug #1428021 - CC: shared token storage and retrieval
  mechanism (cfu)
- Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false
  would cause error (cfu)
- Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog
   (alee)
- Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during
  pkispawn (alee)
- Bugzilla Bug #1520526 - p12 admin certificate is missing when
  certificate is signed Externally (edewata)
- Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA
   instance (alee)
- Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to
  missing nextupdate field (ftweedal)
- Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen)
- Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords
  in several different files after installation completes (alee)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-7" date="1517832000">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and
  audit event logging at startup (jmagne)
- Bugzilla Bug #1523410 -  Unable to have non "pkiuser" owned CA instance
  (alee)
- Bugzilla Bug #1525306 - CC: missing CMC request and response record
  (cfu)
- Bugzilla Bug #1532933 - Installing subsystems with external CMC
  certificates in HSM environment shows import error (edewata)
- Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm
  (edewata)
- Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers
  permitted in fips mode (mharmsen)
- Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED
  outcomes. (edewata)
- Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in
  SharedToken scenario's (cfu)
- Bugzilla Bug #1541526 - CMC: Revocation works with an unknown
  revRequest.issuer (cfu)
- Bugzilla Bug #1541853 - ProfileService: config values with
  backslashes have backslashes removed (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit
  - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-8" date="1518436800">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1542210 - pki console configurations that involves ldap
  passwords leave the plain text password in debug logs (jmagne)
- Bugzilla Bug #1543242 - Regression in lightweight CA key replication
  (ftweedal)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-9" date="1519041600">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release
  - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event
  set (RHEL) (edewata)
- Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata)
- Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM
  and FIPS (edewata)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,
  - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-10" date="1521806400">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1550581 - CMCAuth throws
  org.mozilla.jss.crypto.TokenException: Unable to insert certificate into
  temporary database [rhel-7.5.z] (cfu)
- Bugzilla Bug #1551067 - [MAN] Add --skip-configuration
  and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers
  [rhel-7.5.z] (cheimes, mharmsen)
- Bugzilla Bug #1553068 - Using a Netmask produces an odd entry
  in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled
  by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives
  StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1558919 - Not able to generate certificate request
  with ECC using pki client-cert-request [rhel-7.5.z] (akahat)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-11" date="1523275200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for
  standard conformance [rhel-7.5.z] (cfu)
- Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools
  CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1560233 - libtps does not directly depend on libz</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-12" date="1526990400">- Updated "jss" build and runtime requirements (mharmsen)
- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest,
  CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu)
- Bugzilla Bug #1572548 - IPA install with external-CA is failing when
  FIPS mode enabled. [rhel-7.5.z] (edewata)
- Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1575521 - subsystem -&gt; subsystem SSL handshake issue
  with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs
  improvement [rhel-7.5.z] (jmagne)
- Bugzilla Bug #1581135 - SAN in internal SSL server certificate in
  pkispawn configuration step [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong
  input class_id [rhel-7.5.z] (cfu)
- Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System
  9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13" date="1528459200">- ##########################################################################
- # RHEL 7.5:
- ##########################################################################
- Bugzilla Bug #1553068 - Using a Netmask produces an odd
  entry in a certifcate [rhel-7.5.z] (ftweedal)
- Bugzilla Bug #1585945 - CMC CRMF requests result in
  InvalidKeyFormatException when signing algorithm is ECC
  [rhel-7.5.z] (cfu)
- Bugzilla Bug #1587826 - ExternalCA: Installation failed during
  csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor)
- Bugzilla Bug #1588944 - Cert validation for installation with
  external CA cert [rhel-7.5.z] (edewata)
- Bugzilla Bug #1588945 - CRMFPopClient tool - should allow
  option to do no key archival (cfu)
- Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled
  ACL configuration in AAclAuthz.java reverses rules that allow
  and deny access [rhel-7.5.z] (ftweedal, cfu)
- ##########################################################################
- # RHCS 9.3:
- ##########################################################################
- # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,</changelog>
  <changelog author="Dogtag Team &lt;pki-devel@redhat.com&gt; 10.5.1-13.1" date="1528545600">- Rebuild due to build system database problem</changelog>
</package>
<package pkgid="0703ddd8ce9cb329946126a2cb099b8f084d42289d5935bafa9bdb8f143b0ac6" name="plexus-archiver" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="5.el7_5"/>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0:2.2-3" date="1353585600">- Migration to plexus-containers-container-default</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.2-4" date="1353672000">- Add ASL 2.0 license text to packages</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:2.2-5" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:2.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.3-1" date="1365681600">- Update to upstream version 2.3
- Use apache-commons-compress for bzip2 (de)compression
- Resolves: CVE-2012-2098</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-1" date="1369396800">- Update to upstream version 2.4.2
- Remove patch for CVE-2012-2098 (accepted upstream)</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.4.2-2" date="1371124800">- Update to latest packaging guidelines
- Remove MIT license (only applies to test cases not binary rpm)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-3" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 02.4.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-5" date="1527854400">- Fix arbitrary file write vulnerability
- Resolves: CVE-2018-1002200</changelog>
</package>
<package pkgid="728afaa1e1943d5501a29d869d33307bf17e990b88f33e2fca3f38eb165a768c" name="plexus-archiver" arch="src">
  <version epoch="0" ver="2.4.2" rel="5.el7_5"/>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0:2.2-3" date="1353585600">- Migration to plexus-containers-container-default</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.2-4" date="1353672000">- Add ASL 2.0 license text to packages</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:2.2-5" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:2.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.3-1" date="1365681600">- Update to upstream version 2.3
- Use apache-commons-compress for bzip2 (de)compression
- Resolves: CVE-2012-2098</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-1" date="1369396800">- Update to upstream version 2.4.2
- Remove patch for CVE-2012-2098 (accepted upstream)</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.4.2-2" date="1371124800">- Update to latest packaging guidelines
- Remove MIT license (only applies to test cases not binary rpm)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-3" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 02.4.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-5" date="1527854400">- Fix arbitrary file write vulnerability
- Resolves: CVE-2018-1002200</changelog>
</package>
<package pkgid="d0e5b479c25073b05c559d54c50a2d8dfa85100e9c54bd120b6064be8812fa86" name="plexus-archiver-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.2" rel="5.el7_5"/>
  <changelog author="Jaromir Capik &lt;jcapik@redhat.com&gt; - 0:2.2-3" date="1353585600">- Migration to plexus-containers-container-default</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.2-4" date="1353672000">- Add ASL 2.0 license text to packages</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 0:2.2-5" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 0:2.2-6" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.3-1" date="1365681600">- Update to upstream version 2.3
- Use apache-commons-compress for bzip2 (de)compression
- Resolves: CVE-2012-2098</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-1" date="1369396800">- Update to upstream version 2.4.2
- Remove patch for CVE-2012-2098 (accepted upstream)</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 0:2.4.2-2" date="1371124800">- Update to latest packaging guidelines
- Remove MIT license (only applies to test cases not binary rpm)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-3" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 02.4.2-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.4.2-5" date="1527854400">- Fix arbitrary file write vulnerability
- Resolves: CVE-2018-1002200</changelog>
</package>
<package pkgid="50edb2138c7b71443c5b2a709f60bada5a74ad98cd9fdcb6cccdabc2572fc4aa" name="postgresql-jdbc" arch="noarch">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="8949c28c01525c5fae49802b3166e1a34cd7dc60c6e5d5cde9b1ea5ceed88939" name="postgresql-jdbc" arch="src">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="2cb77f904609e5817e7fbb7406097d023244d4851d3e7d58a0175c25a20b85c4" name="postgresql-jdbc-javadoc" arch="noarch">
  <version epoch="0" ver="9.2.1002" rel="6.el7_5"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.1.901-4" date="1342872000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.1.902-1" date="1342958400">- Update to build 9.1-902</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1001-1" date="1352808000">- Update to build 9.2-1001 for compatibility with PostgreSQL 9.2</changelog>
  <changelog author="Tom Lane &lt;tgl@redhat.com&gt; 9.2.1002-1" date="1352894400">- Update to build 9.2-1002 (just to correct mispackaging of source tarball)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-2" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 9.2.1002-3" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790400">- don't use removed macro %add_to_maven_depmap (#992816)
- lint: trim-lines, reuse %{name} macro, fedora-review fixes
- merge cleanup changes by Stano Ochotnicky</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-4" date="1375790401">- add javadoc subpackage</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 9.2.1002-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 9.2.1002-6" date="1524225600">- fix incompatibility with 9.6+ (rhbz#1547424)
- it's unnecessary to depend on whole java (rhbz#1406931)</changelog>
</package>
<package pkgid="cab82c3c315e057fb4b69e3b0849847a258d762d7efc5b35d0982f2202b3f89e" name="procps-ng" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="68c5144aea8122d510a7c8173f7b2d3e66c3a52166a249d0b6b6d0f74c5cdabb" name="procps-ng" arch="src">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="bcbc3cac4762e0c718cfae6fa727a1a0b68f403b2dbc0e29cff982f542f3add3" name="procps-ng-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="c53846efd1cd9caa2a47be13bcef47795da64e08b8c0621f6f2711ffdc70d4da" name="procps-ng-devel" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="2cf28dd6169d2c25dd737f6af08216f4d8b9f894b821395c610274788c0a8e9e" name="procps-ng-i18n" arch="ppc64le">
  <version epoch="0" ver="3.3.10" rel="17.el7_5.2"/>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-10" date="1469534400">- Fixes sysinfo - devices with name longer than 20 chars are mistaken for partitions
- Resolves: rhbz#1169349</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-11" date="1485864000">- ps no longer removes 'do_' and 'sys_' from wchan data
- Resolves: rhbz#1373246</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-12" date="1487592000">- pmap no longer shows each line twice with blank values on newer kernels
- Resolves: rhbz#1330417</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-13" date="1489406400">- slabtop: incorrect computation of "used" value, use float to fix
- Resolves: rhbz#1329958</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-14" date="1491566400">- sysctl.conf manpage: note about predefined values added
- Resolves: rhbz#1439837</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-15" date="1491566401">- top - real CPU statistics instead of since-boot are shown at start
- Resolves: rhbz#1182327</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-16" date="1496232000">- sysctl manpage: Added explanation of conf files precedence
- Resolves: rhbz#1456905</changelog>
  <changelog author="Jan Rybar &lt;jrybar@redhat.com&gt; - 3.3.10-17" date="1504699200">- top: strange unit scaling with high memory values
- Resolves: rhbz#1253851</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.1" date="1526040000">- fix integer overflows leading to heap overflow in file2strvec()
- Resolves: CVE-2018-1124</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 3.3.10-17.el7_5.2" date="1526385600">- check for truncation after calling snprintf()
- Related: CVE-2018-1124</changelog>
</package>
<package pkgid="4a95096785e80b1881fdd8d1049a852aff6858b4b234c9b081bed9c30ece952c" name="python" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="007b2cbd1b3c828fbb465af837d00253349d5e79beb33f945d9dab89de90f8f1" name="python" arch="src">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="81f7a079beae145e51668805446316ab8932c31ef171198e6676998cce0a0ee5" name="python-boto3" arch="noarch">
  <version epoch="0" ver="1.4.6" rel="4.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.4.1-1" date="1476100800">- Update to 1.4.1</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.2-1" date="1480766400">- Update to 1.4.2</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.2-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.3-1" date="1482926400">- Update to 1.4.3</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.4-1" date="1484913600">- Update to 1.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.6-2" date="1502625600">- Update to 1.4.6</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4" date="1518436800">- Append python-botocore and python-jmespath bundled directories to
  search path where needed

  Resolves: rhbz#1509439</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4.1" date="1527163200">- Fix missing "import sys" in s3/transfer.py

  Resolves: rhbz#1581764</changelog>
</package>
<package pkgid="fac466b032946b50a7f9dfbc930415d46a31b63e1ead11934a487d090d7018a5" name="python-boto3" arch="src">
  <version epoch="0" ver="1.4.6" rel="4.el7_5.1"/>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; - 1.4.1-1" date="1476100800">- Update to 1.4.1</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.2-1" date="1480766400">- Update to 1.4.2</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.2-2" date="1482148800">- Rebuild for Python 3.6</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.3-1" date="1482926400">- Update to 1.4.3</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.4-1" date="1484913600">- Update to 1.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-2" date="1486814400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-3" date="1501156800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;fale@fedoraproject.org&gt; 1.4.6-2" date="1502625600">- Update to 1.4.6</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4" date="1518436800">- Append python-botocore and python-jmespath bundled directories to
  search path where needed

  Resolves: rhbz#1509439</changelog>
  <changelog author="Oyvind Albrigtsen &lt;oalbrigt@redhat.com&gt; - 1.4.6-4.1" date="1527163200">- Fix missing "import sys" in s3/transfer.py

  Resolves: rhbz#1581764</changelog>
</package>
<package pkgid="67a7b0489049b3c3a8ebd0aa45a7251e5a2e5a458eb3f0d70e1962d1bea9b181" name="python-configshell" arch="noarch">
  <version epoch="1" ver="1.1.fb23" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb9-1" date="1378987200">- New upstream release
- Remove dependency on python-simpleparse in favor of pyparsing
- Remove BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.1.fb9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-1" date="1389009600">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-3" date="1390824000">- Update source/URL to current
- Fix changelog</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb14-1" date="1411560000">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb18-1" date="1436961600">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-1" date="1488456000">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-2" date="1495540800">- Add configshell-fix-term.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-3" date="1496145600">- Rename configshell-fix-term.patch to 0001*
- Add 0002-Fix-path-regex-for-and.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1:1.1.fb23-4" date="1522324800">- Fix failure when parsing parameters
- Add 0003-Fix-failing-to-pasre-par-val-parameters.patch
- Add 0004-Fix-failing-to-pasre-param-like-cfgstr-par-val.patch</changelog>
</package>
<package pkgid="d691623b8dc4db69948d9aabc2bae0ed8d3144655ed51fc3a9750d01c8b35049" name="python-configshell" arch="src">
  <version epoch="1" ver="1.1.fb23" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb9-1" date="1378987200">- New upstream release
- Remove dependency on python-simpleparse in favor of pyparsing
- Remove BuildRequires</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:1.1.fb9-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-1" date="1389009600">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb11-3" date="1390824000">- Update source/URL to current
- Fix changelog</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb14-1" date="1411560000">- New upstream release</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb18-1" date="1436961600">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-1" date="1488456000">- Update to latest in Fedora</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-2" date="1495540800">- Add configshell-fix-term.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 1:1.1.fb23-3" date="1496145600">- Rename configshell-fix-term.patch to 0001*
- Add 0002-Fix-path-regex-for-and.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1:1.1.fb23-4" date="1522324800">- Fix failure when parsing parameters
- Add 0003-Fix-failing-to-pasre-par-val-parameters.patch
- Add 0004-Fix-failing-to-pasre-param-like-cfgstr-par-val.patch</changelog>
</package>
<package pkgid="3b9d3aa27fd8848d3ca6c6394662c93039d43973be3529b3baa6ff00ac64ab65" name="python-debug" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="656db2b2c90e257b71bbcd13f766fbd58907cd4e5d970ea26c479cd9969f1acc" name="python-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="e59319b7febde225cc4b1d97ca6df969cb58a76837b8e305d93cc60d8c650faf" name="python-devel" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="2e3c91a1eec96e9922482f5a35cae234e8ca95fef191b9457b5aaa5d7474a336" name="python-gluster" arch="noarch">
  <version epoch="0" ver="3.8.4" rel="54.15.el7.centos"/>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.7" date="1523880000">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.8" date="1524571200">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.9" date="1524571201">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.10" date="1527681600">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.11" date="1527681601">- fixes bugs bz#1556680</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.12" date="1528113600">- fixes bugs bz#1556680 bz#1583462 bz#1583464 bz#1583733 bz#1585046</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.13" date="1530273600">- fixes bugs bz#1594656 bz#1594682 bz#1596076</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.14" date="1530792000">- fixes bugs bz#1590774 bz#1595752 bz#1597509 bz#1597648 bz#1598353 bz#1598416</changelog>
  <changelog author="Milind Changire &lt;mchangir@redhat.com&gt; - 3.8.4-54.15" date="1531396800">- fixes bugs bz#1590774 bz#1597509 bz#1599803</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.8.4-54.15.el7.centos" date="1534420800">- remove vendor and/or packager lines</changelog>
</package>
<package pkgid="3c32783e2692ef211569d353d0a91c37e21ee2a836c00f556d69f2ef1a6050bd" name="python-lesscpy" arch="noarch">
  <version epoch="0" ver="0.9j" rel="4.el7.centos"/>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-1" date="1375099200">- Initial package.</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-2" date="1377086400">- add br python-ply</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-3" date="1377777600">- use python instead of python3 in python2 package</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-4" date="1390996800">- epel7 has no python3</changelog>
</package>
<package pkgid="433030e95cdf46fb3b12e4eb72ee644f4817b46e06d8dcf6352d4dca7680cee2" name="python-lesscpy" arch="src">
  <version epoch="0" ver="0.9j" rel="4.el7.centos"/>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-1" date="1375099200">- Initial package.</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-2" date="1377086400">- add br python-ply</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-3" date="1377777600">- use python instead of python3 in python2 package</changelog>
  <changelog author="Matthias Runge &lt;mrunge@redhat.com&gt; - 0.9j-4" date="1390996800">- epel7 has no python3</changelog>
</package>
<package pkgid="080983e85a3c9d77d95539697030a2126f4b62046901d19db702911caf339d18" name="python-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="d1f69717b053c4e3f7f699d06ea65ee1936c41b57e405f06033a10151f8bac77" name="python-libipa_hbac" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="1ef3483c350fe17665fd00d191139967a9f8bfe459e7941afa4ef3ed43157cae" name="python-libs" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="a5092dd4aa990c85dfe13763303e401bbbfed252efa0e2131a9033d6e6a358bb" name="python-libsss_nss_idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="37eea7401ed1587862f3855c25e7ff52470dd471a8d0099b1985d05b42cc8f67" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="54dabd7b73418a0998a45bd1f2b61c3de6a5fc36dde3c40c300fa8d0587bd920" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="69eb57d388077491196462814b4c13bcb8de9b8c42ab1a07b93769cbd1ec67a8" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="a3f6a76fc80f99fdc41044bc14ecfcbc664107b8e60894fe1d5486b865444289" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="2394044374c0aeab501601552d6820fcf1910e3c0aaefe7bc2ece3831258b89e" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="c377161e831e3b0bf6d212c0019332531ef84ce58d68bb1d4a91cb74dc5f523d" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="5111a8514ad3e69087fc54444a88e965ecc16f506915422924104f759929cad5" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="2796182c1688e43c72d6a90ccdf15ecfb1e799ee283938254d49a85f977a464f" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="9022d3ebf2b007f50aa3533956c795f0ddf11b952a9401d18f5778ba3ac9dc98" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="b726a68361d1396511937bd81449785bd0fdec6ea3fbfc4235d234587b5acda5" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="6fbcdfb54b3511c51775346d0b383465ca4e152757bc8cc7394d280807820950" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.11.6.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.10.1.el7]" date="1530705600">- [x86] add _TIF_UPROBE to _TIF_DO_NOTIFY_MASK (Oleg Nesterov) [1595155 1579521]
- [x86] spec_ctrl: Always clear SPEC_CTRL MSRs when disabling IBRS (Radomir Vrbovsky) [1586150 1574730]
- [sound] alsa: hda/realtek - Add headset mode support for Dell laptop (Jaroslav Kysela) [1588946 1528587]
- [sound] alsa: hda/realtek - Support headset mode for ALC215/ALC285/ALC289 (Jaroslav Kysela) [1593586 1535427]
- [mm] compaction: release zone irqlock in isolate_freepages_block (Andrea Arcangeli) [1596283 1582793]
- [mm] compaction: change the timing to check to drop the spinlock (Andrea Arcangeli) [1596283 1582793]
- [fs] dcache.c: add cond_resched() in shrink_dentry_list() (Aaron Tomlin) [1596184 1584693]
- [misc] vmware balloon: Treat init like reset (Cathy Avery) [1595601 1540110]
- [netdrv] qede: Fix ref-cnt usage count (Chad Dupuis) [1594700 1574847]
- [x86] kvm: fix LAPIC timer drift when guest uses periodic mode ("Dr. David Alan Gilbert") [1594292 1584775]
- [x86] kvm: remove APIC Timer periodic/oneshot spikes ("Dr. David Alan Gilbert") [1594292 1584775]
- [netdrv] mlx4_en: Increase number of default RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of RX rings (Erez Alfasi) [1594127 1520295]
- [netdrv] mlx4_en: Limit the number of TX rings (Erez Alfasi) [1594127 1520295]
- [fs] ceph: don't set read_ahead_kb to 0 by default (Ilya Dryomov) [1590825 1579539]
- [scsi] qla2xxx: Remove stale debug value for login_retry flag (Himanshu Madhani) [1588937 1578880]
- [x86] topology: Update the 'cpu cores' field in /proc/cpuinfo correctly across CPU hotplug operations (Prarit Bhargava) [1588563 1582023]
- [acpi] osi: Add OEM _OSI strings to disable NVidia RTD3 (Jaroslav Kysela) [1584685 1581391]
- [hv] vmbus: Fix a rescind issue (Eduardo Otubo) [1582124 1518498]
- [linux] libata: enable host-wide tags (Ewan Milne) [1581728 1491014]
- [ata] libata: remove ATA_FLAG_LOWTAG (Ewan Milne) [1581728 1491014]
- [ata] Add a new flag to destinguish sas controller (Ewan Milne) [1581728 1491014]
- [ata] libata: make sata_sil24 use fifo tag allocator (Ewan Milne) [1581728 1491014]
- [ata] libata: move sas ata tag allocation to libata-scsi.c (Ewan Milne) [1581728 1491014]
- [ata] libata: use blk taging (Ewan Milne) [1581728 1491014]
- [nvme] rdma: Use mr pool (David Milburn) [1581347 1547273]
- [nvme] rdma: Check remotely invalidated rkey matches our expected rkey (David Milburn) [1581347 1547273]
- [nvme] rdma: wait for local invalidation before completing a request (David Milburn) [1581347 1547273]
- [nvme] rdma: don't complete requests before a send work request has completed (David Milburn) [1581347 1547273]
- [nvme] rdma: don't suppress send completions (David Milburn) [1581347 1547273]
- [x86] kvm: Fix loss of pending INIT due to race (Radim Krcmar) [1580467 1569473]
- [mm] mempolicy: fix use after free when calling get_mempolicy (Augusto Caringi) [1576759 1576755] {CVE-2018-10675}
- [sound] alsa: seq: Fix racy pool initializations (Jaroslav Kysela) [1550171 1593586 1550169 1535427] {CVE-2018-7566}
- [crypto] algif_skcipher: Load TX SG list after waiting (Bruno Eduardo de Oliveira Meneguele) [1541870 1541875] {CVE-2017-13215}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.1.el7]" date="1532088000">- [tcmu] allow userspace to reset ring (Xiubo Li) [1599669 1562587]
- [tcmu] remove commands_lock (Xiubo Li) [1599669 1562587]
- [tcmu] move expired command completion to unmap thread (Xiubo Li) [1599669 1562587]
- [tcmu] add cmd timeout handling wq (Xiubo Li) [1599669 1562587]
- [tcmu] don't block submitting context for block waits (Xiubo Li) [1599669 1562587]
- [tcmu] fix double se_cmd completion (Xiubo Li) [1599669 1562587]
- [tcmu] replace spin lock with mutex (Xiubo Li) [1599669 1562587]
- [target] add SAM_STAT_BUSY sense reason (Xiubo Li) [1599669 1562587]
- [target] core: add device action configfs files (Xiubo Li) [1599669 1562587]
- [target] Avoid mappedlun symlink creation during lun shutdown (Xiubo Li) [1599656 1585081]
- [spectre] update Spectre v1 mitigation string (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix hiddev nospec issues (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: clarify clobbered registers in entry code (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] add missing barrier_nospec() in __get_user64_nocheck() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [spectre] fix gadgets found by smatch scanner (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] rme9652: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hdspm: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] asihpi: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] opl3: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] hda: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] seq: oss: Fix unbalanced use lock for synth MIDI device (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] atm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] time: Protect posix clock array access against speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [kernel] sys.c: fix potential Spectre v1 issue (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sched] autogroup: Fix possible Spectre-v1 indexing for sched_prio_to_weight[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [perf] core: Fix possible Spectre-v1 indexing for -&gt;aux_pages[] (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [sysvipc] sem: mitigate semnum index against spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [alsa] control: Hardening for potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [usbip] vhci_sysfs: fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: prevent using slot_info for Spectre attacs (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [media] dvb_ca_en50221: sanity check slot number from userspace (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [atm] zatm: Fix potential Spectre v1 (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Update spectre-v1 mitigation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] kvm: Add memory barrier on vmcs field lookup (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf/msr: Fix possible Spectre-v1 indexing in the MSR driver (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for x86_pmu::event_map() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] perf: Fix possible Spectre-v1 indexing for hw_perf_event cache_* (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [net] nl80211: Sanitize array index in parse_txq_params (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] vfs, fdtable: Prevent bounds-check bypass via speculative execution (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] syscall: Sanitize syscall table de-references under speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [powerpc] Use barrier_nospec in copy_from_user() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Introduce barrier_nospec for other arches (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce barrier_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] spectre_v1: Disable compiler optimizations over array_index_mask_nospec() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Implement array_index_mask_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [documentation] Document array_index_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Include &lt;asm/barrier.h&gt; dependency (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Allow index argument to have const-qualified type (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Kill array_index_nospec_mask_check() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] nospec: Move array_index_nospec() parameter checking into separate macro (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [include] array_index_nospec: Sanitize speculative array de-references (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] get_user: Use pointer masking to limit speculation (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Use __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] Introduce __uaccess_begin_nospec() and uaccess_try_nospec (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] usercopy: Replace open coded stac/clac with __uaccess_{begin, end} (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] reorganize SMAP handling in user space accesses (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: Tell the compiler that uaccess is unlikely to fault (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}
- [x86] uaccess: fix sparse errors (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3690}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.11.2.el7]" date="1532606400">- [kernel] cpu: hotplug: detect SMT disabled by BIOS (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] l1tf: Fix typos (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Remove extra newline in vmentry_l1d_flush sysfs file (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Initialize the vmx_l1d_flush_pages' content (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation: l1tf: Unbreak !__HAVE_ARCH_PFN_MODIFY_ALLOWED architectures (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [documentation] Add section about CPU vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs, kvm: introduce boot-time control of L1TF mitigations (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Set CPU_SMT_NOT_SUPPORTED early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Expose SMT control init function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Allow runtime control of L1D flush (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Serialize L1D flush parameter setter (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Add static key for flush always (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Move l1tf setup function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Handle EPT disabled state proper (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Drop L1TF MSR list approach (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] litf: Introduce vmx status variable (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Make cpu_show_common() static (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Concentrate bug reporting into a separate function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Online siblings when SMT control is turned on (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Use MSR save list for IA32_FLUSH_CMD if required (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Extend add_atomic_switch_msr() to allow VMENTER only MSRs (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Separate the VMX AUTOLOAD guest/host number accounting (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Add find_msr() helper function (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: vmx: Split the VMX MSR LOAD structures to have an host/guest numbers (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 3 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: Warn user if KVM is loaded SMT and L1TF CPU bug being present (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu: hotplug: Boot HT siblings at least once, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: fix typo in l1tf mitigation string (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_FILE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Boot HT siblings at least once (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- Revert "x86/apic: Ignore secondary threads if nosmt=force" (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Fix up pte-&gt;pfn conversion for PAE (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Protect PAE swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Move TOPOEXT reenablement before reading smp_num_siblings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] speculation/l1tf: Extend 64bit swap file size limit (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Remove the pointless detect_ht() call (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] bugs: Move the l1tf function and define pr_fmt properly (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT, part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] topology: Provide topology_smt_supported() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread(), part 2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] apic: Ignore secondary threads if nosmt=force (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/AMD: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU/AMD: Do not check CPUID max ext level before parsing SMP info (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/intel: Evaluate smp_num_siblings early (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/topology: Provide detect_extended_topology_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu/common: Provide detect_ht_early() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] cpu: Remove the pointless CPU printout (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Provide knobs to control SMT (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [kernel] cpu/hotplug: Split do_cpu_down() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] smp: Provide topology_is_primary_thread() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] CPU: Modify detect_extended_topology() to return result (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: fix build for CONFIG_NUMA_BALANCING=n (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: sync with latest L1TF patches (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: protect _PAGE_NUMA PTEs and PMDs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [mm] l1tf: Disallow non privileged high MMIO PROT_NONE mappings (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Report if too much memory for L1TF workaround (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Limit swap file size to MAX_PA/2 (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Add sysfs reporting for l1tf (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Make sure the first page is always reserved (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect PROT_NONE PTEs against speculation (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Protect swap entries against L1TF (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] l1tf: Increase 32bit PAE __PHYSICAL_PAGE_MASK (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] mm: Fix swap entry comment and macro (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] spec_ctrl: sync with upstream cpu_set_bug_bits() (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86]  add support for L1D flush MSR (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}
- [x86] kvm: mitigation for L1 cache terminal fault vulnerabilities (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.3.el7]" date="1533556800">- [net] tcp: add tcp_ooo_try_coalesce() helper (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: call tcp_drop() from tcp_data_queue_ofo() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: detect malicious patterns in tcp_collapse_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: avoid collapses in tcp_prune_queue() if possible (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: free batches of packets in tcp_prune_ofo_queue() (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] net: add rb_to_skb() and other rb tree helpers (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: fix a stale ooo_last_skb after a replace (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: use an RB tree for ooo receive queue (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: refine tcp_prune_ofo_queue() to not drop all packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [net] tcp: increment sk_drops for dropped rx packets (Paolo Abeni) [1611368 1611369] {CVE-2018-5390}
- [x86] x86/syscall: Fix regression when using the last syscall (pkey_free) (Lauro Ramos Venancio) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.4.el7]" date="1533643200">- [net] ipv6: fix nospec-related regression in ipv6_addr_prefix() (Josh Poimboeuf) [1589033 1589035] {CVE-2018-3693}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.11.5.el7]" date="1533816000">- [kernel] cpu/hotplug: Enable 'nosmt' as late as possible (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-862.11.6.el7]" date="1533902400">- [kernel] cpu/hotplug: Fix 'online' sysfs entry with 'nosmt' (Josh Poimboeuf) [1593383 1593384] {CVE-2018-3620}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.11.6.el7" date="1534248000">- Apply debranding changes</changelog>
</package>
<package pkgid="b9f61b59bb2e426aede4912503f3140a38d369bfcdc1a20b44cef9b53e309709" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.2.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.2.el7]" date="1525089601">- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.3.el7]" date="1525089602">- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.2.3.el7" date="1525780800">- Apply debranding changes</changelog>
</package>
<package pkgid="cb9feda6b71d8aed3c0913d418a6ee9f15720c595021f26afa7406cc274a2452" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.2.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-858.el7]" date="1519732800">- [tools] revert perf: Fix swap for samples with raw data (Jiri Olsa) [1458228]
- [netdrv] ibmvnic: Fix early release of login buffer (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Clean RX pool buffers during device close (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Free RX socket buffer in case of adapter error (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix NAPI structures memory leak (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Fix login buffer memory leaks (Desnes Augusto Nunes do Rosario) [1545578]
- [netdrv] ibmvnic: Wait until reset is complete to set carrier on (Desnes Augusto Nunes do Rosario) [1545578]
- [block] disable runtime-pm for blk-mq (Ming Lei) [1548269]
- [mm] revert memcontrol: fix cgroup creation failure after many small jobs (Aristeu Rozanski) [1548593 1517028]
- [mm] revert cgroup: kill css_id (Aristeu Rozanski) [1548593 1517028]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.2.el7" date="1526904000">- Apply debranding changes</changelog>
</package>
<package pkgid="ce07ec14837e8b4ccc8c08f5a7153a937b4523e241a0e093a97e23717e7eaa52" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.3.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-859.el7]" date="1520251200">- [media] v4l2-compat-ioctl32.c: refactor compat ioctl32 logic fixup (Jarod Wilson) [1548430] {CVE-2017-13166}
- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547585] {CVE-2018-6927}
- [fs] Revert dcache_readdir back to -&gt;readdir() ("Eric W. Biederman") [1525541]
- [md] dm-raid: fix incorrect sync_ratio when degraded (Mike Snitzer) [1547979]
- [mm] page_alloc: fix memmap_init_zone pageblock alignment (Daniel Vacek) [1525121]
- [mm] revert kvmalloc: stress the vmalloc path in the debugging kernel (Jeff Moyer) [1550094]
- [powerpc] 64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543067]
- [powerpc] 64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543067]
- [x86] kvm: vmx: Cache IA32_DEBUGCTL in memory (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: avoid rmb() on full retpoline kernels (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: replace boot_cpu_has with a static key for IBRS checks (Paolo Bonzini) [1537379]
- [x86] spec_ctrl: actually use static key for retpolines (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: optimize IBRS handling at vmenter/vmexit (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: mark RDMSR path as unlikely (Paolo Bonzini) [1537379]
- [x86] kvm: use native_read_msr to read SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm/nvmx: Set the CPU_BASED_USE_MSR_BITMAPS if we have a valid L02 MSR bitmap (Paolo Bonzini) [1537379]
- [x86] nvmx: Properly set spec_ctrl and pred_cmd before merging MSRs (Paolo Bonzini) [1537379]
- [x86] kvm/vmx: Allow direct access to MSR_IA32_SPEC_CTRL (Paolo Bonzini) [1537379]
- [x86] kvm: Add IBPB support (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: make MSR bitmaps per-VCPU (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: Do not disable intercepts for BNDCFGS (Paolo Bonzini) [1537379]
- [x86] kvm: vmx: introduce alloc_loaded_vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: Eliminate vmcs02 pool (Paolo Bonzini) [1537379]
- [x86] kvm: nvmx: single function for switching between vmcs (Paolo Bonzini) [1537379]
- [x86] kvm: Update the reverse_cpuid list to include CPUID_7_EDX (Paolo Bonzini) [1537379]
- [x86] cpuid: Fix up "virtual" IBRS/IBPB/STIBP feature bits on Intel (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Clean up Spectre v2 related CPUID flags (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add Intel feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add AMD feature bits for Speculation Control (Paolo Bonzini) [1537379]
- [x86] cpufeatures: Add CPUID_7_EDX CPUID leaf (Paolo Bonzini) [1537379]
- [x86] cpu: Fill in feature word 13, CPUID_8000_0008_EBX (Paolo Bonzini) [1537379]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-860.el7]" date="1520337600">- [acpi] sbshc: remove raw pointer from printk() message (Baoquan He) [1547009] {CVE-2018-5750}
- [fs] gfs2: fixes to "implement iomap for block_map" (Andreas Grunbacher) [1542594]
- [x86] kvm: svm: disable virtual GIF and VMLOAD/VMSAVE (Paolo Bonzini) [1552090]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-861.el7]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1554590]
- [nvme] validate admin queue before unquiesce (David Milburn) [1549733]</changelog>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.2.el7]" date="1526385600">- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.3.el7]" date="1528891200">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.3.3.el7" date="1528977600">- Apply debranding changes</changelog>
</package>
<package pkgid="491d370ac9f9c829eba496980e649b2a57f04a70477c3aed196a57f6e3549aa3" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.6.3.el7"/>
  <changelog author="Bruno E. O. Meneguele &lt;brdeoliv@redhat.com&gt; [3.10.0-862.el7]" date="1521633600">- [netdrv] i40e: Fix attach VF to VM issue (Stefan Assmann) [1528123]
- [netdrv] ixgbevf: Add check for ixgbe_mbox_api_13 to ixgbevf_probe when setting max_mtu (Ken Cox) [1556696]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1557849]
- [x86] pti: Disable PTI user page table update in EFI virtual mode (Waiman Long) [1540061]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.2.el7]" date="1528372800">- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.3.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.6.3.el7" date="1530014400">- Apply debranding changes</changelog>
</package>
<package pkgid="e157089f3a652e8399698e5e58e18d1be64353742ebe6be91b22f0e851ea17cb" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="862.9.1.el7"/>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.1.1.el7]" date="1523620800">- [x86] kexec/64: Clear control page after PGD init (Waiman Long) [1565700 1540061]
- [x86] pti: Rework the UEFI data corruption fix (Waiman Long) [1565700 1540061]
- [powerpc] tm: Flush TM only if CPU has TM feature (David Gibson) [1563773 1544676] {CVE-2018-1091}
- [gpu] drm/i915/glk: IPC linetime watermark workaround for GLK (Lyude Paul) [1563711 1548651]
- [x86] apic: Remove the (now) unused disable_IO_APIC() function (Baoquan He) [1563108 1521003]
- [x86] apic: Fix restoring boot IRQ mode in reboot and kexec/kdump (Baoquan He) [1563108 1521003]
- [x86] apic: Split disable_IO_APIC() into two functions to fix CONFIG_KEXEC_JUMP=y (Baoquan He) [1563108 1521003]
- [x86] apic: Split out restore_boot_irq_mode() from disable_IO_APIC() (Baoquan He) [1563108 1521003]
- [netdrv] i40e: Close client on suspend and restore client MSIx on resume (Stefan Assmann) [1563106 1538847]
- [fs] nfs: Fix unstable write completion (Scott Mayhew) [1563103 1544647]
- [x86] kvm: Fix device passthrough when SME is active (Suravee Suthikulpanit) [1563098 1557911]
- [powerpc] powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1563096 1553927]
- [powerpc] pseries: Add H_GET_CPU_CHARACTERISTICS flags &amp; wrapper (Mauricio Oliveira) [1563096 1553927]
- [nvme] fixup nvme_sysfs_delete() (David Milburn) [1563092 1543716]
- [x86] smpboot: Fix uncore_pci_remove() indexing bug when hot-removing a physical CPU (Prarit Bhargava) [1563091 1527731]
- [x86] tsc: Fix erroneous TSC rate on Skylake Xeon (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Print tsc_khz, when it differs from cpu_khz (Prarit Bhargava) [1563088 1466058]
- [x86] tsc: Future-proof native_calibrate_tsc() (Prarit Bhargava) [1563088 1466058]
- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4/cxgbvf: Handle 32-bit fw port capabilities (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4vf: define get_fecparam ethtool callback (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: ethtool forward error correction management support (Arjun Vynipadath) [1561906 1526163]
- [netdrv] cxgb4: core hardware/firmware support for Forward Error Correction on a link (Arjun Vynipadath) [1561906 1526163]
- [iscsi-target] Fix panic when adding second TCP connection to iSCSI session (Maurizio Lombardi) [1561900 1544670]
- [crypto] chelsio: Fix src buffer dma length (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Move DMA un/mapping to chcr from lld cxgb4 driver (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove unused parameter (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: Remove allocation of sg list to implement 2K limit of dsgl header (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: introduce __skb_put_zero() (Arjun Vynipadath) [1561899 1548047]
- [crypto] chelsio: make skb_put &amp; friends return void pointers (Arjun Vynipadath) [1561899 1548047]
- [gpu] drm/i915/cfl: Remove alpha support protection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915/cnl: Map VBT DDC Pin to BSpec DDC Pin (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Add retries for LSPCON detection (Rob Clark) [1561897 1464911]
- [gpu] drm/i915: Don't give up waiting on INVALID_MODE (Rob Clark) [1561897 1464911]
- [nvme] pci: Fix EEH failure on ppc (Mauricio Oliveira) [1561894 1558499]
- [net] netfilter: ebtables: fix erroneous reject of last rule (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: ebtables: CONFIG_COMPAT: don't trust userland offsets (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add more missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] netfilter: bridge: ebt_among: add missing match size checks (Florian Westphal) [1552366 1552370] {CVE-2018-1068}
- [net] ipsec: Fix aborted xfrm policy dump crash (Bruno Eduardo de Oliveira Meneguele) [1517292 1517290] {CVE-2017-16939}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.2.1.el7]" date="1525089600">- [md] dm: fix dropped return code from dm_get_bdev_for_ioctl (Mike Snitzer) [1567746 1562962]
- [crypto] aesni: Add support for 192 &amp; 256 bit keys to AESNI RFC4106 (Bruno Eduardo de Oliveira Meneguele) [1570537 1568167]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.3.1.el7]" date="1525953600">- [x86] kpti/kexec: fix wrong page address in clear_page (Dave Young) [1573173 1571162]
- [x86] kvm: fix icebp instruction handling (Paolo Bonzini) [1566849 1566845] {CVE-2018-1087}
- [x86] entry/64: Don't use IST entry for #BP stack (Paolo Bonzini) [1567084 1567083] {CVE-2018-8897}
- [kernel] perf/hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569878 1569874] {CVE-2018-1000199}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.4.1.el7]" date="1525953601">- [powerpc] msi: Fix race condition in tearing down MSI interrupts (David Milburn) [1570511 1549680]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.5.1.el7]" date="1527508800">- [netdrv] vmxnet3: use correct flag to indicate LRO feature (Neil Horman) [1567771 1558685]
- [netdrv] vmxnet3: avoid xmit reset due to a race in vmxnet3 (Neil Horman) [1567771 1558685]
- [kernel] ib/mlx5: Respect new UMR capabilities (Alaa Hleihel) [1579847 1573661]
- [infiniband] ib/mlx5: Enable ECN capable bits for UD RoCE v2 QPs (Alaa Hleihel) [1579847 1573661]
- [scsi] cdrom: do not call check_disk_change() inside cdrom_open() (Maurizio Lombardi) [1579834 1538362]
- [hid] wacom: Fix reporting of touch toggle (WACOM_HID_WD_MUTE_DEVICE) events (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Recognize WACOM_HID_WD_PEN as a type of pen collection (Benjamin Tissoires) [1579192 1551776]
- [hid] wacom: generic: Send BTN_STYLUS3 when both barrel switches are set (Benjamin Tissoires) [1579191 1551783]
- [fs] eventpoll: fix uninitialized variable in epoll_ctl (Paul Moore) [1578734 1553256]
- [fs] nfs41: do not return ENOMEM on LAYOUTUNAVAILABLE (Scott Mayhew) [1578458 1574002]
- [net] sock_diag: request _diag module only when the family or proto has been registered (Xin Long) [1578272 1544898]
- [target] Re-add missing SCF_ACK_KREF assignment in (Mike Christie) [1578048 1561851]
- [gpu] drm/nouveau: Fix deadlock in nv50_mstm_register_connector() (Lyude Paul) [1577792 1571927]
- [netdrv] vmxnet3: segCnt can be 1 for LRO packets (Neil Horman) [1577790 1426680]
- [s390] correct nospec auto detection init order (Hendrik Brueckner) [1577767 1558325]
- [s390] add sysfs attributes for spectre (Hendrik Brueckner) [1577767 1558325]
- [s390] report spectre mitigation via syslog (Hendrik Brueckner) [1577767 1558325]
- [s390] add automatic detection of the spectre defense (Hendrik Brueckner) [1577767 1558325]
- [s390] move nobp parameter functions to nospec-branch.c (Hendrik Brueckner) [1577767 1558325]
- [s390] do not bypass BPENTER for interrupt system calls (Hendrik Brueckner) [1577767 1558325]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1577767 1558325]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1577767 1558325]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1577767 1558325]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1577767 1558325]
- [s390] entry.s: fix spurious zeroing of r0 (Hendrik Brueckner) [1577767 1558325]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1577767 1558325]
- [s390] align and prepare spectre mitigation for upstream commits (Hendrik Brueckner) [1577767 1558325]
- [s390] alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1577767 1558325]
- [gpu] drm/amdgpu: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/radeon: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm/nouveau: Fix deadlock on runtime suspend (Lyude Paul) [1577760 1563957]
- [gpu] drm: Allow determining if current task is output poll worker (Lyude Paul) [1577760 1563957]
- [gpu] workqueue: Allow retrieval of current task's work struct (1/5) (Lyude Paul) [1577760 1563957]
- [md] dm: remove fmode_t argument from .prepare_ioctl hook (Mike Snitzer) [1576508 1562960]
- [md] dm: hold DM table for duration of ioctl rather than use blkdev_get (Mike Snitzer) [1576508 1562960]
- [scsi] iscsi: respond to netlink with unicast when appropriate (Chris Leech) [1576293 1330865]
- [netdrv] i40e: fix incorrect UP-TC mapping (Stefan Assmann) [1574371 1558159]
- [powerpc] System reset avoid interleaving oops using die synchronisation (Mauricio Oliveira) [1574366 1564126]
- [powerpc] Do not send system reset request through the oops path (Mauricio Oliveira) [1574366 1564126]
- [powerpc] crash: Remove the test for cpu_online in the IPI callback (Mauricio Oliveira) [1574366 1564126]
- [sound] hda: Fix a wrong FIXUP for alc289 on Dell machines (Jaroslav Kysela) [1571581 1548969]
- [sound] hda: Fix headset mic detection problem for two Dell machines (Jaroslav Kysela) [1571581 1548969]
- [firmware] fw_cfg: write vmcoreinfo details (Marc-Andre Lureau) [1571369 1533367]
- [kernel] crash: export paddr_vmcoreinfo_note() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add DMA register (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: add a public uapi header (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: handle fw_cfg_read_blob() error (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: remove inline from fw_cfg_read_blob() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings around FW_CFG_FILE_DIR read (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warning reading FW_CFG_ID (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings with fw_cfg_file (Marc-Andre Lureau) [1571369 1533367]
- [firmware] fw_cfg: fix sparse warnings in fw_cfg_sel_endianness() (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: add DMA register" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: do DMA read operation" (Marc-Andre Lureau) [1571369 1533367]
- [firmware] revert "fw_cfg: write vmcoreinfo details" (Marc-Andre Lureau) [1571369 1533367]
- [infiniband] mlx5: Set the default active rate and width to QDR and 4X (Honggang Li) [1570536 1554535]
- [x86] spec_ctrl: disable IBRS in idle, part 2 (Josh Poimboeuf) [1570532 1558668]
- [x86] platform/uv: Fix critical UV MMR address error (Frank Ramsay) [1570520 1562945]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1570518 1561787]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1570518 1561787]
- [powerpc] lib: seq: Add seq_buf_printf() (Mauricio Oliveira) [1570518 1561787]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1570509 1561785]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1570509 1561785]
- [fs] vfs: Remove incorrect debugging WARN in prepend_path (Frank Sorenson) [1568322 1481732]
- [fs] xfs: fix transaction allocation deadlock in IO path (Eric Sandeen) [1568320 1551111]
- [md] support to split big bio (Ming Lei) [1568070 1557434]
- [block] introduce bio_split2() and bio_pair2_release() (Ming Lei) [1568070 1557434]
- [netdrv] qed: Free reserved MR tid (Harish Patil) [1568069 1554217]
- [netdrv] qed: Free RoCE ILT Memory on rmmod qedr (Harish Patil) [1568069 1554217]
- [net] sctp: use right member as the param of list_for_each_entry (Xin Long) [1565983 1483445]
- [net] sctp: reset owner sk for data chunks on out queues when migrating a sock (Xin Long) [1565983 1483445]
- [net] xfrm: policy: check policy direction value (Bruno Eduardo de Oliveira Meneguele) [1479419 1479421] {CVE-2017-11600}
- [x86] spec_ctrl: Fix late microcode problem with AMD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] entry: Add missing "$" in IBRS macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Clean up entry code &amp; remove unused APIs (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Mask off SPEC_CTRL MSR bits that are managed by kernel (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: add support for SSBD to RHEL IBRS entry/exit macros (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Use CamelCase for SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Rename _RDS to _SSBD (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [kernel] seccomp: Enable speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [fs] proc: Provide details on speculation flaw mitigations (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] nospec: Allow getting/setting on non-current task (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] speculation: Add prctl for Speculative Store Bypass mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] process: Allow runtime control of Speculative Store Bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [uapi] prctl: Add speculation control prctls (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] kvm/vmx: Expose SPEC_CTRL Bit(2) to the guest (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs/amd: Add support to disable RDS on Fam[15, 16, 17]h if requested (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up RDS setting with IBRS code (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Provide boot parameters for the spec_store_bypass_disable mitigation (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Expose /sys/../spec_store_bypass (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] bugs: Read SPEC_CTRL MSR during boot and re-use (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] spec_ctrl: Use separate PCP variables for IBRS entry and exit (Waiman Long) [1566904 1566905] {CVE-2018-3639}
- [x86] cpufeatures: Make CPU bugs sticky (Waiman Long) [1566904 1566905] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.6.1.el7]" date="1528113600">- [x86] microcode: Load microcode on all cpus (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Fix CPU synchronization routine (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Attempt late loading only when new microcode is present (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Synchronize late microcode loading (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Request microcode on the BSP (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Do not upload microcode if CPUs are offline (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Writeback and invalidate caches before updating microcode (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Check microcode revision before updating sibling threads (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Get rid of struct apply_microcode_ctx (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add a microcode loader callback (Prarit Bhargava) [1578047 1568249]
- [x86] microcode: Propagate return value from updating functions (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Change load_microcode_amd()'s param to bool to fix preemptibility bug (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Add a helper which gives the microcode revision (Prarit Bhargava) [1578047 1568249]
- [x86] cpu: Add native CPUID variants returning a single datum (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/amd: Move private inlines to .c and mark local functions static (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Simplify generic_load_microcode() (Prarit Bhargava) [1578047 1568249]
- [x86] microcode/intel: Do not issue microcode updates messages on each CPU (Prarit Bhargava) [1578047 1568249]
- [kernel] pidns: Don't have unshare(CLONE_NEWPID) imply CLONE_THREAD (Oleg Nesterov) [1578997 1577745]
- [powerpc] 64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}
- [powerpc] 64s: Move the data access exception out-of-line (Mauricio Oliveira) [1581045 1581036] {CVE-2018-3639}</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.7.1.el7]" date="1528286400">- [linux] fsnotify: Fix fsnotify_mark_connector race (Miklos Szeredi) [1584684 1569921]</changelog>
  <changelog author="Rado Vrbovsky &lt;rvrbovsk@redhat.com&gt; [3.10.0-862.8.1.el7]" date="1529064000">- [x86] always enable eager FPU by default on non-AMD processors (Paolo Bonzini) [1589051 1589048] {CVE-2018-3665}
- [net] nf_reset: also clear nfctinfo bits (Florian Westphal) [1588458 1572983]
- [x86] bugs: Switch the selection of mitigation from CPU vendor to CPU features (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's SPEC_CTRL MSR usage (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Add AMD's variant of SSB_NO (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Fix VM guest SSBD problems (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Eliminate TIF_SSBD checks in IBRS on/off functions (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Disable SSBD update from scheduler if not user settable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make ssbd_enabled writtable (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Remove thread_info check in __wrmsr_on_cpu() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Write per-thread SSBD state to spec_ctrl_pcp (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Add a read-only ssbd_enabled debugfs file (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs/intel: Set proper CPU features and setup RDS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: vmx: Emulate MSR_IA32_ARCH_CAPABILITIES (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] kvm: svm: Implement VIRT_SPEC_CTRL support for SSBD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation, KVM: Implement support for VIRT_SPEC_CTRL/LS_CFG (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Rework spec_ctrl base and mask logic (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Rework SPEC_CTRL update after late microcode loading (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Make sync_all_cpus_ibrs() write spec_ctrl_pcp value (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs: Unify x86_spec_ctrl_{set_guest, restore_host} (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Rework speculative_store_bypass_update() (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Add virtualized speculative store bypass disable support (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bugs, KVM: Extend speculation control for VIRT_SPEC_CTRL (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] KVM: Rename KVM SPEC_CTRL MSR functions to match upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Handle HT correctly on AMD (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Add FEATURE_ZEN (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle SSBD enumeration (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] cpufeatures: Disentangle MSR_SPEC_CTRL enumeration from IBRS (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Use synthetic bits for IBRS/IBPB/STIBP (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [documentation] spec_ctrl: Do some minor cleanups (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] speculation: Make "seccomp" the default mode for Speculative Store Bypass (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] seccomp: Move speculation migitation control to arch code (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Add filter flag to opt-out of SSB mitigation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [kernel] seccomp: Use PR_SPEC_FORCE_DISABLE (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] prctl: Add force disable speculation (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spectre_v2: No mitigation if CPU not affected and no command override (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Do not enable PTI on CPUs which are not vulnerable to Meltdown (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] bug: Add X86_BUG_CPU_MELTDOWN and X86_BUG_SPECTRE_V[12] (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] pti: Rename CONFIG_KAISER to CONFIG_PAGE_TABLE_ISOLATION (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up naming of SPEC_CTRL MSR bits with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}
- [x86] spec_ctrl: Sync up SSBD changes with upstream (Waiman Long) [1584323 1584569] {CVE-2018-3639}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [3.10.0-862.9.1.el7]" date="1530100800">- [iscsi-target] Fix iscsi_np reset hung task during parallel delete (Maurizio Lombardi) [1583593 1579217]</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.10.0-862.9.1.el7" date="1531742400">- Apply debranding changes</changelog>
</package>
<package pkgid="b923fcd5a59735b372a155f8b09676eb63f18a699517546cca1b28342f0e9433" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.2.2.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.2.el7a]" date="1524830400">- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.2.2.el7a]" date="1526731200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="78dc7377473a5fde5ec15d215c6fef03e4054217019c8d1408b73a339c961337" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.8.1.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.1.1.el7a]" date="1523361600">- [watchdog] sbsa: use 32-bit read for WCV (Robert Richter) [1564025 1553237]
- [nvme] nvme-pci: Fix EEH failure on ppc (David Milburn) [1563570 1554747]
- [nvme] nvme-pci: Fix queue double allocations (David Milburn) [1561916 1555296]
- [powerpc] mm: Fixup tlbie vs store ordering issue on POWER9 (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Move the functions that does the actual tlbie closer (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm/radix: Remove unused code (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv: Fix kexec crashes caused by tlbie tracing (Mauricio Oliveira) [1561915 1559636]
- [powerpc] 64s/radix: Optimize TLB range flush barriers (Mauricio Oliveira) [1561915 1559636]
- [powerpc] npu-dma.c: Fix crash after __mmu_notifier_register failure (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Fix deadlock in mmio_invalidate() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Workaround Nest MMU bug with TLB invalidations (Mauricio Oliveira) [1561915 1559636]
- [powerpc] mm: Add tracking of the number of coprocessors using a context (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Don't explicitly flush nmmu tlb (Mauricio Oliveira) [1561915 1559636]
- [powerpc] powernv/npu: Use flush_all_mm() instead of flush_tlb_mm() (Mauricio Oliveira) [1561915 1559636]
- [powerpc] kvm: ppc: book3s hv: Fix duplication of host SLB entries (Gustavo Duarte) [1561914 1559812]
- [powerpc] 64s: Fix lost pending interrupt due to race causing lost update to irq_happened (Steve Best) [1561913 1558661]
- [redhat] fix NVMe hotplug failure on some platforms (Steve Ulrich) [1561464 1557004]
- [powerpc] powerpc/powernv: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] powerpc/pseries: Support firmware disable of RFI flush (Mauricio Oliveira) [1561463 1554920]
- [powerpc] cxl: read PHB indications from the device tree (Steve Best) [1560901 1563111 1558675 1553205]
- [powerpc] powerpc/powernv: Enable tunneled operations (Steve Best) [1560901 1563111 1558675 1553205]
- [misc] cxl: Fix timebase synchronization status on P9 (Steve Best) [1560901 1558675]
- [powerpc] Fix DABR match on hash based systems (Steve Best) [1560900 1552080]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of large pages in radix page fault handler (Laurent Vivier) [1560899 1549933]
- [powerpc] powerpc/64s: Fix NULL AT_BASE_PLATFORM when using DT CPU features (Steve Best) [1560897 1555236]
- [powerpc] KVM: PPC: Book3S HV: Fix VRMA initialization with 2MB or 1GB memory backing (Laurent Vivier) [1559874 1552768]
- [s390] KVM: s390: take care of clock-comparator sign control (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on hotplugged CPUs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: consider epoch index on TOD clock syncs (Thomas Huth) [1559871 1555263]
- [s390] KVM: s390: provide only a single function for setting the tod (fix SCK) (Thomas Huth) [1559871 1555263]
- [powerpc] KVM: PPC: Book3S HV: Fix trap number return from __kvmppc_vcore_entry (Laurent Vivier) [1559870 1555068]
- [fs] NFS: Fix unstable write completion (Scott Mayhew) [1559869 1552471]
- [redhat] hardcode .el7a dist tag (Frantisek Hrbata)</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.2.1.el7a]" date="1523620800">- [pci] PCI: Remove redundant probes for device reset support (Robert Richter) [1564026 1553226]
- [pci] PCI: Probe for device reset support during enumeration (Robert Richter) [1564026 1553226]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.3.1.el7a]" date="1523880000">- [misc] cxl: Fix possible deadlock when processing page faults from cxllib (Gustavo Duarte) [1564420 1562957]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.4.1.el7a]" date="1525867200">- [powerpc] watchdog: remove arch_trigger_cpumask_backtrace (Gustavo Duarte) [1566995 1562287]
- [powerpc] 64s: return more carefully from sreset NMI (Gustavo Duarte) [1566995 1562287]
- [perf] hwbp: Simplify the perf-hwbp code, fix documentation (Eugene Syromiatnikov) [1569877 1569875] {CVE-2018-1000199}</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.5.1.el7a]" date="1526299200">- [powerpc] powerpc/powernv/npu: Do a PID GPU TLB flush when invalidating a large address range (Mauricio Oliveira) [1576515 1571167]
- [powerpc] powernv/npu: Prevent overwriting of pnv_npu2_init_contex() callback parameters (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/npu: Add lock to prevent race in concurrent context init/destroy (Mauricio Oliveira) [1577757 1568164]
- [powerpc] powernv/memtrace: Let the arch hotunplug code flush cache (Mauricio Oliveira) [1575528 1571156]
- [powerpc] mm: Flush cache on memory hot(un)plug (Mauricio Oliveira) [1575528 1571156]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.6.1.el7a]" date="1526472000">- [fs] dcache: fix quadratic behavior with parallel shrinkers (Miklos Szeredi) [1577768 1565210]
- [powerpc] revert "powernv: Increase memory block size to 1GB on radix" (Mauricio Oliveira) [1577766 1574524]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.7.1.el7a]" date="1527163200">- [scsi] csiostor: add support for 32 bit port capabilities (Arjun Vynipadath) [1580276 1547715]
- [md] dm btree: fix serious bug in btree_split_beneath() (Mike Snitzer) [1576514 1559487]
- [arm64] Kill PSCI_GET_VERSION as a variant-2 workaround (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] Add ARM_SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose SMCCC version through psci_ops (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [firmware] firmware/psci: Expose PSCI conduit (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Add SMCCC_ARCH_WORKAROUND_1 fast handling (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Report SMCCC_ARCH_WORKAROUND_1 BP hardening support (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] arm/arm64: KVM: Consolidate the PSCI include files (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] KVM: Increment PC after handling an SMC trap (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [arm64] entry: Apply BP hardening for suspicious interrupts from EL0 (Mark Langsdorf) [1574842 1543628] {CVE-2017-5715}
- [fs] ovl: update ctx-&gt;pos on impure dir iteration (Thomas Huth) [1570546 1561534]
- [scsi] megaraid_sas: driver version 07.702.06.00-rh2 (Tomas Henzl) [1569396 1553228]
- [scsi] megaraid_sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Bump mpt3sas driver version to v15.100.01.00 (Tomas Henzl) [1569396 1553228]
- [scsi] mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (Tomas Henzl) [1569396 1553228]
- [powerpc] pseries: Restore default security feature flags on setup (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Move default security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Fix clearing of security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v2() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Wire up cpu_show_spectre_v1() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Use the security flags in pseries_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Use the security flags in pnv_setup_rfi_flush() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Enhance the information in cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] 64s: Move cpu_show_meltdown() (Mauricio Oliveira) [1566998 1561784]
- [powerpc] powernv: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Set or clear security feature flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] Add security feature flags for Spectre/Meltdown (Mauricio Oliveira) [1566998 1561784]
- [powerpc] pseries: Add new H_GET_CPU_CHARACTERISTICS flags (Mauricio Oliveira) [1566998 1561784]
- [powerpc] rfi-flush: Call setup_rfi_flush() after LPM migration (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Differentiate enabled and patched flush types (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Always enable fallback flush on pseries (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Make it possible to call setup_rfi_flush() again (Mauricio Oliveira) [1567002 1561783]
- [powerpc] rfi-flush: Move the logic to avoid a redo into the debugfs code (Mauricio Oliveira) [1567002 1561783]</changelog>
  <changelog author="Frantisek Hrbata &lt;fhrbata@hrbata.com&gt; [4.14.0-49.8.1.el7a]" date="1527508800">- [powerpc] powerpc/64s: Add support for a store forwarding barrier at kernel entry/exit (Mauricio Oliveira) [1566912 1566913] {CVE-2018-3639}</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.8.1.el7a]" date="1533211200">- Rolled in CentOS certificates and signed modules with a CentOS certificate.
- Turned off CONFIG_CPU_FREQ_DEFAULT_GOV_ONDEMAND and turned on CONFIG_CPU_FREQ_DEFAULT_GOV_PERFORMANCE
- added git as buildrequirement to do patches (if/when required)</changelog>
</package>
<package pkgid="cbcdeff37b7a318be400ef5421770111bb148174d04daa1a6c31ab25baca4068" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="a71ff8b7941de8099f60f25cbca7856ea18b3bdc638f09f0ab9751d8dc2a3c38" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.14.0" rel="49.el7a"/>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-41.el7a]" date="1518436800">- [netdrv] ibmvnic: queue reset when CRQ gets closed during reset (Steve Best) [1543729]
- [kernel] modules: add rhelversion MODULE_INFO tag (Prarit Bhargava) [1542796]
- [kernel] put RHEL info into generated headers (Prarit Bhargava) [1542796]
- [netdrv] ibmvnic: Ensure that buffers are NULL after free (Steve Best) [1543713]
- [netdrv] ibmvnic: fix empty firmware version and errors cleanup (Steve Best) [1543713]
- [powerpc] powerpc/64s: Allow control of RFI flush via debugfs (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Improve RFI L1-D cache flush fallback (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/xmon: Add RFI flush related fields to paca dump (Mauricio Oliveira) [1543083]
- [powerpc] powerpc/64s: Wire up cpu_show_meltdown() (Mauricio Oliveira) [1543083]
- [base] sysfs/cpu: Add vulnerability folder (Mauricio Oliveira) [1543083]
- [scsi] aacraid: Fix udev inquiry race condition (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not attempt abort when Fw panicked (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix hang in kdump (Gustavo Duarte) [1541141]
- [scsi] aacraid: Do not remove offlined devices (Gustavo Duarte) [1541141]
- [scsi] aacraid: Fix ioctl reset hang (Gustavo Duarte) [1541141]
- [redhat] configs: enable CONFIG_USERFAULTFD on s390x (David Hildenbrand) [1540679]
- [pci] PCI/AER: Skip recovery callbacks for correctable errors from ACPI APEI (Steve Ulrich) [1495258]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-42.el7a]" date="1518782400">- [net] sched: cbq: create block for q-&gt;link.block (Davide Caratti) [1544314]
- [net] cls_u32: fix use after free in u32_destroy_key() (Paolo Abeni) [1516696]
- [net] netfilter: xt_osf: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}
- [net] netfilter: nfnetlink_cthelper: Add missing permission checks (Florian Westphal) [1539229] {CVE-2017-17448}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-43.el7a]" date="1518868800">- [netdrv] sfc: don't warn on successful change of MAC (Jarod Wilson) [1448760]
- [netdrv] ibmvnic: Remove skb-&gt;protocol checks in ibmvnic_xmit (Steve Best) [1544017]
- [netdrv] ibmvnic: Reset long term map ID counter (Steve Best) [1544017]
- [scsi] qla2xxx: Update driver version to 10.00.00.01.07.5a-k1 (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix memory corruption during hba reset test (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix logo flag for qlt_free_session_done() (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Fix NULL pointer crash due to probe failure (Himanshu Madhani) [1542778]
- [scsi] qla2xxx: Defer processing of GS IOCB calls (Himanshu Madhani) [1542778]
- [nvme] nvme-pci: allocate device queues storage space at probe (Ming Lei) [1523270]
- [kernel] include/linux/slab.h: add kmalloc_array_node() and kcalloc_node() (Ming Lei) [1523270]
- [nvme] nvme-pci: serialize pci resets (Ming Lei) [1523494]
- [block] blk-mq: fix race between updating nr_hw_queues and switching io sched (Ming Lei) [1523270]
- [block] blk-mq: avoid to map CPU into stale hw queue (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue during switching io sched and updating nr_requests (Ming Lei) [1523270]
- [block] blk-mq: quiesce queue before freeing queue (Ming Lei) [1523270]
- [block] blk-mq: only run the hardware queue if IO is pending (Ming Lei) [1523270]
- [block] Fix a race between blk_cleanup_queue() and timeout handling (Ming Lei) [1538482]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-44.el7a]" date="1519041600">- [powerpc] powerpc/mm: Flush radix process translations when setting MMU type (Laurent Vivier) [1533718]
- [powerpc] powerpc/mm/radix: Split linear mapping on hot-unplug (Suraj Jitindar Singh) [1516201]
- [powerpc] KVM: PPC: Book3S: Add MMIO emulation for VMX instructions (Laurent Vivier) [1537935]
- [powerpc] KVM: PPC: Book3S HV: Make HPT resizing work on POWER9 (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Fix handling of secondary HPTEG in HPT resizing code (Laurent Vivier) [1535789]
- [powerpc] KVM: PPC: Book3S HV: Drop locks before reading guest memory (Laurent Vivier) [1540077]
- [powerpc] powerpc/64s/radix: Boot-time NULL pointer protection using a guard-PID (Mauricio Oliveira) [1539109]
- [block] blk-mq-debugfs: don't allow write on attributes with seq_operations set (Ming Lei) [1543463]
- [fs] dcache: Revert manually unpoison dname after allocation to shut up kasan's reports (Joe Lawrence) [1539609]
- [fs] fs/dcache: Use read_word_at_a_time() in dentry_string_cmp() (Joe Lawrence) [1539609]
- [lib] lib/strscpy: Shut up KASAN false-positives in strscpy() (Joe Lawrence) [1539609]
- [kernel] compiler.h: Add read_word_at_a_time() function (Joe Lawrence) [1539609]
- [kernel] compiler.h, kasan: Avoid duplicating __read_once_size_nocheck() (Joe Lawrence) [1539609]
- [redhat] update handling for our additional certificates ("Herton R. Krzesinski") [1539015]
- [redhat] make CONFIG_MODULE_SIG_SHA* common through all architectures ("Herton R. Krzesinski") [1539015]
- [redhat] remove extra_certificates file ("Herton R. Krzesinski") [1539015]
- [fs] xfs: truncate pagecache before writeback in xfs_setattr_size() (Bill O'Donnell) [1518553]
- [fs] autofs: revert autofs: take more care to not update last_used on path walk (Ian Kent) [1535760]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-45.el7a]" date="1519128000">- [netdrv] tg3: APE heartbeat changes (Jonathan Toppins) [1545870]
- [redhat] fix rh_get_maintainer.pl (Andrew Jones)
- [scsi] lpfc Fix SCSI io host reset causing kernel crash (Dick Kennedy) [1540693]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-46.el7a]" date="1519646400">- [powerpc] ppc needs macro for spectre v1 mitigation (Christoph von Recklinghausen) [1538186]
- [arm64] Add missing Falkor part number for branch predictor hardening (Spectre/Meltdown) (Steve Ulrich) [1545916]
- [s390] kernel: fix rwlock implementation (Hendrik Brueckner) [1547423]
- [redhat] s390/configs: enable KERNEL_NOBP for s390 (Hendrik Brueckner) [1532726]
- [s390] spinlock: add __nospec_barrier memory barrier (Hendrik Brueckner) [1532726]
- [s390] Replace IS_ENABLED(EXPOLINE_*) with IS_ENABLED(CONFIG_EXPOLINE_*) (Hendrik Brueckner) [1532726]
- [s390] introduce execute-trampolines for branches (Hendrik Brueckner) [1532726]
- [s390] run user space and KVM guests with modified branch prediction (Hendrik Brueckner) [1532726]
- [s390] add options to change branch prediction behaviour for the kernel (Hendrik Brueckner) [1532726]
- [s390] s390/alternative: use a copy of the facility bit mask (Hendrik Brueckner) [1532726]
- [s390] add optimized array_index_mask_nospec (Hendrik Brueckner) [1532726]
- [s390] scrub registers on kernel entry and KVM exit (Hendrik Brueckner) [1532726]
- [s390] enable CPU alternatives unconditionally (Hendrik Brueckner) [1532726]
- [s390] introduce CPU alternatives (Hendrik Brueckner) [1532726]
- [security] KEYS: Use individual pages in big_key for crypto buffers (David Howells) [1510601]
- [powerpc] powerpc/eeh: Fix crashes in eeh_report_resume() (Gustavo Duarte) [1546028]
- [redhat] switch secureboot kernel image signing to release keys ("Herton R. Krzesinski")
- [redhat] RHMAINTAINERS: update power management sections (Al Stone)
- [fs] xfs: validate sb_logsunit is a multiple of the fs blocksize (Bill O'Donnell) [1538496]
- [kernel] bpf: prevent out-of-bounds speculation (Mark Langsdorf) [1536036]
- [arm64] kpti: Fix the interaction between ASID switching and software PAN (Mark Langsdorf) [1536036]
- [arm64] SW PAN: Point saved ttbr0 at the zero page when switching to init_mm (Mark Langsdorf) [1536036]
- [arm64] Re-order reserved_ttbr0 in linker script (Mark Langsdorf) [1536036]
- [arm64] capabilities: Handle duplicate entries for a capability (Mark Langsdorf) [1536036]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-47.el7a]" date="1520251200">- [kernel] futex: Prevent overflow by strengthen input validation (Joe Lawrence) [1547583] {CVE-2018-6927}</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-48.el7a]" date="1520337600">- [s390] s390/entry.S: fix spurious zeroing of r0 (Hendrik Brueckner) [1551586]</changelog>
  <changelog author="Herton R. Krzesinski &lt;herton@redhat.com&gt; [4.14.0-49.el7a]" date="1521028800">- [netdrv] tg3: prevent scheduling while atomic splat (Jonathan Toppins) [1555032]
- [powerpc] KVM: PPC: Book3S HV: Fix guest time accounting with VIRT_CPU_ACCOUNTING_GEN (Laurent Vivier) [1541614]
- [powerpc] KVM: PPC: Book3S HV: Improve handling of debug-trigger HMIs on POWER9 (Gustavo Duarte) [1548423]</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; [4.14.0-49.el7a]" date="1523361600">- Rolled in CentOS certificates and signed modules with a CentOS certificate.</changelog>
</package>
<package pkgid="b9be9376b11bd456ed1c9192de67cb5ec273f6be26460e8ae72fbb4b08403a8b" name="python-rtslib" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="5c738f00fb25727a7259e830d7deab750f7913d25146a2214a258587e7aefa21" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="c03bd04fef5c5da0310b0d470dfdd75d25f1af0c3fe799089714c80500f04bcd" name="python-rtslib" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="85b3773d203dbe85df4762864f2b3bb2daa96bea6cd9c94fb68ef48218c9acbf" name="python-rtslib" arch="src">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="e8b70a58aaa853e74076dd9fa2466756bdf856ab557e66d686d4c198f46fec07" name="python-rtslib-doc" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="11.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb63-2" date="1495022400">- Add patch 0003 to fix #1440172</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
</package>
<package pkgid="cd6e0192e89d62d3839d44a83abd7f108504b44ba8635a45d1cb84625dc2e84f" name="python-rtslib-doc" arch="noarch">
  <version epoch="0" ver="2.1.fb63" rel="12.el7_5"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-3" date="1509624000">- Enabled qla2xxx target support to fix #1327710</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-4" date="1519214400">- Allow users to pass in a string into the attributes.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-5" date="1519646400">- rtslib never creates hba directories without a storage object within it,
  but if under some circumstance these existed then we should remove them.</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-6" date="1522152000">- enable alua for pscsi/tcmu if kernel reports support</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-7" date="1523361600">- Introduce support to saveconfig at the storage object level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-8" date="1523448000">- Fix ALUA tpg config setup</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-9" date="1523620800">- Support tcmu hw max sectors
- saveconfig: dump control string containing control=value tuples</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-10" date="1524139200">- Add missing patch "tcmu: add control constructor arg"</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-11" date="1524571200">- Fix a failure in absence of save file</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb63-12" date="1528113600">- saveconfig: way to block-level save with delete command</changelog>
</package>
<package pkgid="3b7a7384c6f6011d8122250aad8c556e5d9d7b827e3fddce0020347ce2a3ae67" name="python-sss" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="d7a4751cbc1d5dfb8b2ea8586f6cd39fe512a8dae94ab7479a8260e085e3d51d" name="python-sss-murmur" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="f682fefdf2005e0759463bf9b225e2e6f4ef8bc185547e14c2663bb36658557d" name="python-sssdconfig" arch="noarch">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="928b0f0d5a8a483d742bd144c191071323e76fdc87c8e669f07fcb7962616031" name="python-test" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="de7987a5d04260e86e6a9c869d80afd52b9eb4dd61a83921218cf26fafa3b05b" name="python-tools" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="77c80faf2acd97e9170f1af81d0fe6c35d6535404ef74f5c34f7e20331023d36" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d5ea75e52305eefe11041a61b75f507ba58d8aaa64960ffcdf75a906a1e9ddd4" name="python2-ipaclient" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="eebe13647c1ba74cf10633547dccf1e2443238a9197f7a609bfc8aaa26cd1017" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="1b149120c5e3f44fbbef2e581a314ec18a4dacbfa31cc5aa506e3a0094fdfdf4" name="python2-ipalib" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="970d1e3abd5cda53b5a2add9eef7dcffbc8f392b9d4b7b5ecce63686c0b40ecd" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.1"/>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-3.el7" date="1509019200">- Drop workaround for building on AArch64 (#1482244)
- Temporarily reduce Requires on python-netaddr to 0.7.5-7 (#1506485)</changelog>
  <changelog author="Pavel Vomacka &lt;pvomacka@redhat.com&gt; - 4.5.4-4.el7" date="1509710400">- Resolves: #1388135 [RFE] limit the retro changelog to dns subtree.
  - ldap: limit the retro changelog to dns subtree
- Resolves: #1427798 Use X509v3 Basic Constraints "CA:TRUE" instead
  of "CA:FALSE" IPA CA CSR
  - Include the CA basic constraint in CSRs when renewing a CA
- Resolves: #1493145 ipa-replica-install might fail because of an already
  existing entry cn=ipa-http-delegation,cn=s4u2proxy,cn=etc,$SUFFIX
  - Checks if replica-s4u2proxy.ldif should be applied
- Resolves: #1493150 [RFE] set nsslapd-ignore-time-skew: on by default
  - ds: ignore time skew during initial replication step
  - ipa-replica-manage: implicitly ignore initial time skew in force-sync 
- Resolves: #1500218 Replica installation at domain-level 0 fails against
  upgraded ipa-server
  - Fix ipa-replica-conncheck when called with --principal
- Resolves: #1506188 server-del doesn't remove dns-server configuration
  from ldap</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-11.el7" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.1" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="26eba32de19c8996b4fed71d300166f08220e0a2fed102194f9a2e78201a3627" name="python2-ipaserver" arch="noarch">
  <version epoch="0" ver="4.5.4" rel="10.el7.centos.3"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-5.el7" date="1512043200">- Resolves: #1415162 ipa-exdom-extop plugin can exhaust DS worker threads
- Resolves: #1378892 host-find slowness caused by missing host attributes in index</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 4.5.4-6.el7" date="1512388800">- Resolves: #1520279 - rebuild against samba 4.7</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-7.el7" date="1513166400">- Resolves: #1421869 Unable to re-add broken AD trust - Unexpected Information received
  - adtrust: filter out subdomains when defining our topology to AD
- Resolves: #1486286 IPA failing to authenticate via password+OTP on RHEL7.4 with fips enabled
  - Don't allow OTP or RADIUS in FIPS mode
- Resolves: #1494226 IPA User Details not being displayed in WebUI
  - Fix cert-find for CA-less installations
- Resolves: #1498387 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
  - 389-ds-base crashed as part of ipa-server-intall in ipa-uuid
- Resolves: #1503022 ipa-getkeytab man page should have more details about consequences of krb5 key renewal
  - ipa-getkeytab man page: add more details about the -r option
- Resolves: #1509288 IPA trust-add internal error (expected security.dom_sid got None)
  - ipaserver/plugins/trust.py; fix some indenting issues
  - trust: detect and error out when non-AD trust with IPA domain name exists
  - ipaserver/plugins/trust.py: pep8 compliance
- Resolves: #1511019 ipa-restore broken with python2
  - Fix ipa-restore (python2)
- Resolves: #1511607 ipa-backup does not backup Custodia keys and files
  - Backup ipa-custodia conf and keys
- Resolves: #1512482 kra install fails after ipa cert renewed
  - Don't use admin cert during KRA installation
  - Prevent set_directive from clobbering other keys
  - pep8: reduce line lengths in CAInstance.__enable_crl_publish
  - installutils: refactor set_directive
  - Add tests for installutils.set_directive
  - Add safe DirectiveSetter context manager
  - Old pylint doesn't support bad python3 option
- Resolves: #1514163 CA less IPA install with external certificates fails on RHEL 7 in FIPS mode
  - Fix ca less IPA install on fips mode</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-8.el7" date="1515585600">- Resolves: #1477531 Incorrect attribute level rights (ipaallowedtoperform) of service object
  - WebUI: make keytab tables on service and host pages writable
- Resolves: #1529444 ObjectclassViolation seen while adding idview with domain-resolution-order option
  - Idviews: fix objectclass violation on idview-add
- Resolves: #1451576 ipa cert-request failed to generate certificate from csr
  - Fixing the cert-request comparing whole email address case-sensitively.</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-9.el7" date="1516017600">- Resolves: #1458169 --force-join option is not mentioned in ipa-replica-install man page
  - Add --force-join into ipa-replica-install manpage
- Resolves: #1457876 ipa-backup fails silently
  - Changed ownership of ldiffile to DS_USER
- Resolves: #1409786 Second phase of --external-ca ipa-server-install setup fails when dirsrv is not running
  - Checks if Dir Server is installed and running before IPA installation
- Resolves: #1452086 Pagination Size under Customization in IPA WebUI accepts negative values
  - WebUI: Add positive number validator
  - WebUI: change validator of page size settings
  - WebUI: fix jslint error</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7" date="1518004800">- Resolves: #1540361 ipa-advise for smartcards is out-of-date
  - ipa-advise for smartcards updated</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.1" date="1523361600">- Resolves: #1565519 Clarify the need to restart services in ipa-server-certinstall(1)
  - Add a notice to restart ipa services after certs are installed
- Resolves: #1564390 OTP and Radius Authentication does not work in FIPS mode
  - Fix OTP validation in FIPS mode
  - Increase the default token key size
  - Revert "Don't allow OTP or RADIUS in FIPS mode"
  - Log errors from NSS during FIPS OTP key import
- Resolves: #1565520 ipa client pointing to replica shows KDC has no support for encryption type
  - ipa-replica-install: make sure that certmonger picks the right master
- Resolves: #1565605 DNS records updated with all IPAddresses of an interface when IPA server/replica try to install with Specific IP address of that interface
  - replica-install: pass --ip-address to client install</changelog>
  <changelog author="Florence Blanc-Renaud &lt;frenaud@redhat.com&gt; - 4.5.4-10.el7.2" date="1526385600">- Resolves: #1579189 nsds5ReplicaReleaseTimeout should be set by default
  - Add nsds5ReplicaReleaseTimeout to replica config
  - Fix upgrade (update_replica_config) in single master mode
- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers
- Resolves: #1579203 4.5.0 -&gt; 4.5.4 upgrade breaks in ipa-server-upgrade: No such file or directory: '/var/lib/pki/pki-tomcat/conf/ca/CS.cfg'
  - Don't try to backup CS.cfg during upgrade if CA is not configured</changelog>
  <changelog author="Rob Crittenden &lt;rcritten@redhat.com&gt; - 4.5.4-10.el7.3" date="1528718400">- Resolves: #1579190 Improve Custodia client and key distribution handling
  - Use single Custodia instance in installers</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 4.5.4-10.el7.centos.3" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="88e2bcc066beed6bacdf487681cda50a6c6506e6217483a2cdd9c8f4bd8825e2" name="qemu-guest-agent" arch="ppc64le">
  <version epoch="10" ver="2.8.0" rel="2.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-1.el7" date="1430222400">- Rebase to 2.3.0 [bz#1194152]
- Resolves: bz#1194152
  (Rebase to 2.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-2.el7" date="1436788800">- synchronized with qemu-kvm-rhev-2.3.0-9.el7
- qemuga-Change-fsreeze-hook-default-location.patch [bz#1210707]
- qemuga-qga-commands-posix-Fix-bug-in-guest-fstrim.patch [bz#1211973]
- Resolves: bz#1210707
  (The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
- Resolves: bz#1211973
  ('guest-fstrim' failed for guest with os on spapr-vscsi disk)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-3.el7" date="1440504000">- qemuga-Do-not-stop-qemu-guest-agent-service-on-target-switc.patch [bz#1160930]
- Resolves: bz#1160930
  (The guest agent service in rhel7 guest will be stopped after run the init command)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-1.el7" date="1452600000">- Rebase to QEMU 2.5.0 [bz#1297673]
- Resolves: bz#1297673
  (Rebase to QEMU 2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-2.el7" date="1465992000">- qemuga-redhat-blacklist-guest-exec-commands.patch [bz#1340346]
- Resolves: bz#1340346
  (blacklist guest-exec in newer version of qemu-guest-agent)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-3.el7" date="1472731200">- qemuga-spec-add-qemu-ga-man-page.patch [bz#1101556]
- Resolves: bz#1101556
  ([RFE] qemu-ga should have a config file)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.8.0-1.el7" date="1486468800">- Rebase to 2.8.0 base [bz#1414676]
- Resolves: bz#1414676
  (Rebase qemu-guest-agent to 2.8.0 base)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.8.0-2.el7" date="1495195200">- qemuga-Remove-unnecessary-dependencies.patch [bz#1441999]
- Resolves: bz#1441999
  (Clean qemu-ga dependencies)</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 2.8.0-3.el7" date="1531483200">- qemuga-qga-Add-guest-get-host-name-command.patch [bz#1598210]
- qemuga-qga-Add-guest-get-users-command.patch [bz#1598210]
- qemuga-qga-Add-guest-get-timezone-command.patch [bz#1598210]
- qemuga-qemu-ga-check-if-utmpx.h-is-available-on-the-system.patch [bz#1598210]
- qemuga-qemu-ga-add-guest-get-osinfo-command.patch [bz#1598210]
- qemuga-test-qga-pass-environemnt-to-qemu-ga.patch [bz#1598210]
- qemuga-test-qga-add-test-for-guest-get-osinfo.patch [bz#1598210]
- Resolves: bz#1598210
  (Backport some features to 2.8 in RHEL 7.5 [rhel-7.5.z])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 2.8.0-2.el7_5.1" date="1531828800">- Corrected the package version from 2.8.0-3.el7 to 2.8.0-2.el7_5.1
- Resolves: bz#1598210
  (Backport some features to 2.8 in RHEL 7.5 [rhel-7.5.z])</changelog>
</package>
<package pkgid="49f3f147d153b6ae8d6a3c541ac07040684b828e53ba87afde3301ce401e37c5" name="qemu-guest-agent" arch="src">
  <version epoch="10" ver="2.8.0" rel="2.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-1.el7" date="1430222400">- Rebase to 2.3.0 [bz#1194152]
- Resolves: bz#1194152
  (Rebase to 2.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-2.el7" date="1436788800">- synchronized with qemu-kvm-rhev-2.3.0-9.el7
- qemuga-Change-fsreeze-hook-default-location.patch [bz#1210707]
- qemuga-qga-commands-posix-Fix-bug-in-guest-fstrim.patch [bz#1211973]
- Resolves: bz#1210707
  (The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
- Resolves: bz#1211973
  ('guest-fstrim' failed for guest with os on spapr-vscsi disk)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-3.el7" date="1440504000">- qemuga-Do-not-stop-qemu-guest-agent-service-on-target-switc.patch [bz#1160930]
- Resolves: bz#1160930
  (The guest agent service in rhel7 guest will be stopped after run the init command)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-1.el7" date="1452600000">- Rebase to QEMU 2.5.0 [bz#1297673]
- Resolves: bz#1297673
  (Rebase to QEMU 2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-2.el7" date="1465992000">- qemuga-redhat-blacklist-guest-exec-commands.patch [bz#1340346]
- Resolves: bz#1340346
  (blacklist guest-exec in newer version of qemu-guest-agent)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-3.el7" date="1472731200">- qemuga-spec-add-qemu-ga-man-page.patch [bz#1101556]
- Resolves: bz#1101556
  ([RFE] qemu-ga should have a config file)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.8.0-1.el7" date="1486468800">- Rebase to 2.8.0 base [bz#1414676]
- Resolves: bz#1414676
  (Rebase qemu-guest-agent to 2.8.0 base)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.8.0-2.el7" date="1495195200">- qemuga-Remove-unnecessary-dependencies.patch [bz#1441999]
- Resolves: bz#1441999
  (Clean qemu-ga dependencies)</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 2.8.0-3.el7" date="1531483200">- qemuga-qga-Add-guest-get-host-name-command.patch [bz#1598210]
- qemuga-qga-Add-guest-get-users-command.patch [bz#1598210]
- qemuga-qga-Add-guest-get-timezone-command.patch [bz#1598210]
- qemuga-qemu-ga-check-if-utmpx.h-is-available-on-the-system.patch [bz#1598210]
- qemuga-qemu-ga-add-guest-get-osinfo-command.patch [bz#1598210]
- qemuga-test-qga-pass-environemnt-to-qemu-ga.patch [bz#1598210]
- qemuga-test-qga-add-test-for-guest-get-osinfo.patch [bz#1598210]
- Resolves: bz#1598210
  (Backport some features to 2.8 in RHEL 7.5 [rhel-7.5.z])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 2.8.0-2.el7_5.1" date="1531828800">- Corrected the package version from 2.8.0-3.el7 to 2.8.0-2.el7_5.1
- Resolves: bz#1598210
  (Backport some features to 2.8 in RHEL 7.5 [rhel-7.5.z])</changelog>
</package>
<package pkgid="6b7ab05bb3f5e20b41347fdc9df8f79f163e7e33dda4c9ccc42782ca487676a1" name="qemu-guest-agent-debuginfo" arch="ppc64le">
  <version epoch="10" ver="2.8.0" rel="2.el7_5.1"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-1.el7" date="1430222400">- Rebase to 2.3.0 [bz#1194152]
- Resolves: bz#1194152
  (Rebase to 2.3.0)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-2.el7" date="1436788800">- synchronized with qemu-kvm-rhev-2.3.0-9.el7
- qemuga-Change-fsreeze-hook-default-location.patch [bz#1210707]
- qemuga-qga-commands-posix-Fix-bug-in-guest-fstrim.patch [bz#1211973]
- Resolves: bz#1210707
  (The default path '/etc/qemu/fsfreeze-hook' for 'fsfreeze-hook' script doesn't exist)
- Resolves: bz#1211973
  ('guest-fstrim' failed for guest with os on spapr-vscsi disk)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.3.0-3.el7" date="1440504000">- qemuga-Do-not-stop-qemu-guest-agent-service-on-target-switc.patch [bz#1160930]
- Resolves: bz#1160930
  (The guest agent service in rhel7 guest will be stopped after run the init command)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-1.el7" date="1452600000">- Rebase to QEMU 2.5.0 [bz#1297673]
- Resolves: bz#1297673
  (Rebase to QEMU 2.5)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-2.el7" date="1465992000">- qemuga-redhat-blacklist-guest-exec-commands.patch [bz#1340346]
- Resolves: bz#1340346
  (blacklist guest-exec in newer version of qemu-guest-agent)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.5.0-3.el7" date="1472731200">- qemuga-spec-add-qemu-ga-man-page.patch [bz#1101556]
- Resolves: bz#1101556
  ([RFE] qemu-ga should have a config file)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.8.0-1.el7" date="1486468800">- Rebase to 2.8.0 base [bz#1414676]
- Resolves: bz#1414676
  (Rebase qemu-guest-agent to 2.8.0 base)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.8.0-2.el7" date="1495195200">- qemuga-Remove-unnecessary-dependencies.patch [bz#1441999]
- Resolves: bz#1441999
  (Clean qemu-ga dependencies)</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 2.8.0-3.el7" date="1531483200">- qemuga-qga-Add-guest-get-host-name-command.patch [bz#1598210]
- qemuga-qga-Add-guest-get-users-command.patch [bz#1598210]
- qemuga-qga-Add-guest-get-timezone-command.patch [bz#1598210]
- qemuga-qemu-ga-check-if-utmpx.h-is-available-on-the-system.patch [bz#1598210]
- qemuga-qemu-ga-add-guest-get-osinfo-command.patch [bz#1598210]
- qemuga-test-qga-pass-environemnt-to-qemu-ga.patch [bz#1598210]
- qemuga-test-qga-add-test-for-guest-get-osinfo.patch [bz#1598210]
- Resolves: bz#1598210
  (Backport some features to 2.8 in RHEL 7.5 [rhel-7.5.z])</changelog>
  <changelog author="Wainer dos Santos Moschetta &lt;wainersm@redhat.com&gt; - 2.8.0-2.el7_5.1" date="1531828800">- Corrected the package version from 2.8.0-3.el7 to 2.8.0-2.el7_5.1
- Resolves: bz#1598210
  (Backport some features to 2.8 in RHEL 7.5 [rhel-7.5.z])</changelog>
</package>
<package pkgid="f2db53c34dff3d4a43f181b94d6bf90b3bb4f97bfa9f19eda23b4f643101448c" name="qemu-img-ma" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-14.el7" date="1514894400">- kvm-spapr-don-t-initialize-PATB-entry-if-max-cpu-compat-.patch [bz#1525866]
- kvm-block-avoid-recursive-AioContext-acquire-in-bdrv_ina.patch [bz#1520824]
- kvm-io-send-proper-HTTP-response-for-websocket-errors.patch [bz#1518649]
- kvm-io-include-full-error-message-in-websocket-handshake.patch [bz#1518649]
- kvm-io-use-case-insensitive-check-for-Connection-Upgrade.patch [bz#1518649]
- kvm-ui-Always-remove-an-old-VNC-channel-watch-before-add.patch [bz#1518649]
- kvm-io-Small-updates-in-preparation-for-websocket-change.patch [bz#1518649]
- kvm-io-Add-support-for-fragmented-websocket-binary-frame.patch [bz#1518649]
- kvm-io-Allow-empty-websocket-payload.patch [bz#1518649]
- kvm-io-Ignore-websocket-PING-and-PONG-frames.patch [bz#1518649]
- kvm-io-Reply-to-ping-frames.patch [bz#1518649]
- kvm-io-Attempt-to-send-websocket-close-messages-to-clien.patch [bz#1518649]
- kvm-io-add-trace-events-for-websockets-frame-handling.patch [bz#1518649]
- kvm-io-monitor-encoutput-buffer-size-from-websocket-GSou.patch [bz#1518650]
- kvm-io-simplify-websocket-ping-reply-handling.patch [bz#1518649]
- kvm-io-get-rid-of-qio_channel_websock_encode-helper-meth.patch [bz#1518649]
- kvm-io-pass-a-struct-iovec-into-qio_channel_websock_enco.patch [bz#1518649]
- kvm-io-get-rid-of-bounce-buffering-in-websock-write-path.patch [bz#1518649]
- kvm-io-cope-with-websock-Connection-header-having-multip.patch [bz#1518649]
- kvm-io-add-trace-points-for-websocket-HTTP-protocol-head.patch [bz#1518649]
- kvm-io-fix-mem-leak-in-websock-error-path.patch [bz#1518649]
- kvm-io-Add-missing-GCC_FMT_ATTR-fix-Werror-suggest-attri.patch [bz#1518649]
- kvm-qemu.py-make-VM-a-context-manager.patch [bz#1519721]
- kvm-iotests.py-add-FilePath-context-manager.patch [bz#1519721]
- kvm-qemu-iothread-IOThread-supports-the-GMainContext-eve.patch [bz#1519721]
- kvm-qom-provide-root-container-for-internal-objs.patch [bz#1519721]
- kvm-iothread-provide-helpers-for-internal-use.patch [bz#1519721]
- kvm-iothread-export-iothread_stop.patch [bz#1519721]
- kvm-iothread-delay-the-context-release-to-finalize.patch [bz#1519721]
- kvm-aio-fix-assert-when-remove-poll-during-destroy.patch [bz#1519721]
- kvm-blockdev-hold-AioContext-for-bdrv_unref-in-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-drive_bac.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-blockdev_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-internal_.patch [bz#1519721]
- kvm-iothread-add-iothread_by_id-API.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-testing-command.patch [bz#1519721]
- kvm-qemu-iotests-add-202-external-snapshots-IOThread-tes.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-force-boolean.patch [bz#1519721]
- kvm-iotests-add-VM.add_object.patch [bz#1519721]
- kvm-iothread-fix-iothread_stop-race-condition.patch [bz#1519721]
- kvm-qemu-iotests-add-203-savevm-with-IOThreads-test.patch [bz#1519721]
- Resolves: bz#1518649
  (Client compatibility flaws in VNC websockets server)
- Resolves: bz#1518650
  (CVE-2017-15268 qemu-kvm-rhev: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1519721
  (Both qemu and guest hang when performing live snapshot transaction with data-plane)
- Resolves: bz#1520824
  (Migration with dataplane, qemu processor hang, vm hang and migration can't finish)
- Resolves: bz#1525866
  (P9 to P8 guest migration fails when kernel is not started)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="548ebf21e7a75d16e3b8a6d373c737f81533504083046dd30f9fff81a8d99383" name="qemu-img-ma" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.3" date="1530532800">- kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1593193]
- kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1593193]
- kvm-s390x-fix-storage-attributes-migration-for-non-small.patch [bz#1596553]
- Resolves: bz#1593193
  (Pegas1.1 - SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-ma) [rhel-7.5.z])
- Resolves: bz#1596553
  (RHEL-Alt-7.5 - qemu has error during migration of larger guests [rhel-7.5.z])</changelog>
</package>
<package pkgid="c033522d29d4dad3e2d63d80d31b0e2f5dd73655058fdf3e7567bdc5ef646bb7" name="qemu-kvm-common-ma" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-14.el7" date="1514894400">- kvm-spapr-don-t-initialize-PATB-entry-if-max-cpu-compat-.patch [bz#1525866]
- kvm-block-avoid-recursive-AioContext-acquire-in-bdrv_ina.patch [bz#1520824]
- kvm-io-send-proper-HTTP-response-for-websocket-errors.patch [bz#1518649]
- kvm-io-include-full-error-message-in-websocket-handshake.patch [bz#1518649]
- kvm-io-use-case-insensitive-check-for-Connection-Upgrade.patch [bz#1518649]
- kvm-ui-Always-remove-an-old-VNC-channel-watch-before-add.patch [bz#1518649]
- kvm-io-Small-updates-in-preparation-for-websocket-change.patch [bz#1518649]
- kvm-io-Add-support-for-fragmented-websocket-binary-frame.patch [bz#1518649]
- kvm-io-Allow-empty-websocket-payload.patch [bz#1518649]
- kvm-io-Ignore-websocket-PING-and-PONG-frames.patch [bz#1518649]
- kvm-io-Reply-to-ping-frames.patch [bz#1518649]
- kvm-io-Attempt-to-send-websocket-close-messages-to-clien.patch [bz#1518649]
- kvm-io-add-trace-events-for-websockets-frame-handling.patch [bz#1518649]
- kvm-io-monitor-encoutput-buffer-size-from-websocket-GSou.patch [bz#1518650]
- kvm-io-simplify-websocket-ping-reply-handling.patch [bz#1518649]
- kvm-io-get-rid-of-qio_channel_websock_encode-helper-meth.patch [bz#1518649]
- kvm-io-pass-a-struct-iovec-into-qio_channel_websock_enco.patch [bz#1518649]
- kvm-io-get-rid-of-bounce-buffering-in-websock-write-path.patch [bz#1518649]
- kvm-io-cope-with-websock-Connection-header-having-multip.patch [bz#1518649]
- kvm-io-add-trace-points-for-websocket-HTTP-protocol-head.patch [bz#1518649]
- kvm-io-fix-mem-leak-in-websock-error-path.patch [bz#1518649]
- kvm-io-Add-missing-GCC_FMT_ATTR-fix-Werror-suggest-attri.patch [bz#1518649]
- kvm-qemu.py-make-VM-a-context-manager.patch [bz#1519721]
- kvm-iotests.py-add-FilePath-context-manager.patch [bz#1519721]
- kvm-qemu-iothread-IOThread-supports-the-GMainContext-eve.patch [bz#1519721]
- kvm-qom-provide-root-container-for-internal-objs.patch [bz#1519721]
- kvm-iothread-provide-helpers-for-internal-use.patch [bz#1519721]
- kvm-iothread-export-iothread_stop.patch [bz#1519721]
- kvm-iothread-delay-the-context-release-to-finalize.patch [bz#1519721]
- kvm-aio-fix-assert-when-remove-poll-during-destroy.patch [bz#1519721]
- kvm-blockdev-hold-AioContext-for-bdrv_unref-in-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-drive_bac.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-blockdev_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-internal_.patch [bz#1519721]
- kvm-iothread-add-iothread_by_id-API.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-testing-command.patch [bz#1519721]
- kvm-qemu-iotests-add-202-external-snapshots-IOThread-tes.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-force-boolean.patch [bz#1519721]
- kvm-iotests-add-VM.add_object.patch [bz#1519721]
- kvm-iothread-fix-iothread_stop-race-condition.patch [bz#1519721]
- kvm-qemu-iotests-add-203-savevm-with-IOThreads-test.patch [bz#1519721]
- Resolves: bz#1518649
  (Client compatibility flaws in VNC websockets server)
- Resolves: bz#1518650
  (CVE-2017-15268 qemu-kvm-rhev: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1519721
  (Both qemu and guest hang when performing live snapshot transaction with data-plane)
- Resolves: bz#1520824
  (Migration with dataplane, qemu processor hang, vm hang and migration can't finish)
- Resolves: bz#1525866
  (P9 to P8 guest migration fails when kernel is not started)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="8c1f9df226abdfcd74eb7665b0baa6b287bcdbd92c3d5aadc8b74a2bd2c9769f" name="qemu-kvm-common-ma" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.3" date="1530532800">- kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1593193]
- kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1593193]
- kvm-s390x-fix-storage-attributes-migration-for-non-small.patch [bz#1596553]
- Resolves: bz#1593193
  (Pegas1.1 - SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-ma) [rhel-7.5.z])
- Resolves: bz#1596553
  (RHEL-Alt-7.5 - qemu has error during migration of larger guests [rhel-7.5.z])</changelog>
</package>
<package pkgid="4099418bd5c0f57168e89a455eb48449243475a9ee433be1ae48def63ef44ee9" name="qemu-kvm-ma" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-14.el7" date="1514894400">- kvm-spapr-don-t-initialize-PATB-entry-if-max-cpu-compat-.patch [bz#1525866]
- kvm-block-avoid-recursive-AioContext-acquire-in-bdrv_ina.patch [bz#1520824]
- kvm-io-send-proper-HTTP-response-for-websocket-errors.patch [bz#1518649]
- kvm-io-include-full-error-message-in-websocket-handshake.patch [bz#1518649]
- kvm-io-use-case-insensitive-check-for-Connection-Upgrade.patch [bz#1518649]
- kvm-ui-Always-remove-an-old-VNC-channel-watch-before-add.patch [bz#1518649]
- kvm-io-Small-updates-in-preparation-for-websocket-change.patch [bz#1518649]
- kvm-io-Add-support-for-fragmented-websocket-binary-frame.patch [bz#1518649]
- kvm-io-Allow-empty-websocket-payload.patch [bz#1518649]
- kvm-io-Ignore-websocket-PING-and-PONG-frames.patch [bz#1518649]
- kvm-io-Reply-to-ping-frames.patch [bz#1518649]
- kvm-io-Attempt-to-send-websocket-close-messages-to-clien.patch [bz#1518649]
- kvm-io-add-trace-events-for-websockets-frame-handling.patch [bz#1518649]
- kvm-io-monitor-encoutput-buffer-size-from-websocket-GSou.patch [bz#1518650]
- kvm-io-simplify-websocket-ping-reply-handling.patch [bz#1518649]
- kvm-io-get-rid-of-qio_channel_websock_encode-helper-meth.patch [bz#1518649]
- kvm-io-pass-a-struct-iovec-into-qio_channel_websock_enco.patch [bz#1518649]
- kvm-io-get-rid-of-bounce-buffering-in-websock-write-path.patch [bz#1518649]
- kvm-io-cope-with-websock-Connection-header-having-multip.patch [bz#1518649]
- kvm-io-add-trace-points-for-websocket-HTTP-protocol-head.patch [bz#1518649]
- kvm-io-fix-mem-leak-in-websock-error-path.patch [bz#1518649]
- kvm-io-Add-missing-GCC_FMT_ATTR-fix-Werror-suggest-attri.patch [bz#1518649]
- kvm-qemu.py-make-VM-a-context-manager.patch [bz#1519721]
- kvm-iotests.py-add-FilePath-context-manager.patch [bz#1519721]
- kvm-qemu-iothread-IOThread-supports-the-GMainContext-eve.patch [bz#1519721]
- kvm-qom-provide-root-container-for-internal-objs.patch [bz#1519721]
- kvm-iothread-provide-helpers-for-internal-use.patch [bz#1519721]
- kvm-iothread-export-iothread_stop.patch [bz#1519721]
- kvm-iothread-delay-the-context-release-to-finalize.patch [bz#1519721]
- kvm-aio-fix-assert-when-remove-poll-during-destroy.patch [bz#1519721]
- kvm-blockdev-hold-AioContext-for-bdrv_unref-in-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-drive_bac.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-blockdev_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-internal_.patch [bz#1519721]
- kvm-iothread-add-iothread_by_id-API.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-testing-command.patch [bz#1519721]
- kvm-qemu-iotests-add-202-external-snapshots-IOThread-tes.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-force-boolean.patch [bz#1519721]
- kvm-iotests-add-VM.add_object.patch [bz#1519721]
- kvm-iothread-fix-iothread_stop-race-condition.patch [bz#1519721]
- kvm-qemu-iotests-add-203-savevm-with-IOThreads-test.patch [bz#1519721]
- Resolves: bz#1518649
  (Client compatibility flaws in VNC websockets server)
- Resolves: bz#1518650
  (CVE-2017-15268 qemu-kvm-rhev: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1519721
  (Both qemu and guest hang when performing live snapshot transaction with data-plane)
- Resolves: bz#1520824
  (Migration with dataplane, qemu processor hang, vm hang and migration can't finish)
- Resolves: bz#1525866
  (P9 to P8 guest migration fails when kernel is not started)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="b8a91af55e0faf09fb17eb088081b48dab4f24527b625a8dc98a37278e756daf" name="qemu-kvm-ma" arch="src">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-14.el7" date="1514894400">- kvm-spapr-don-t-initialize-PATB-entry-if-max-cpu-compat-.patch [bz#1525866]
- kvm-block-avoid-recursive-AioContext-acquire-in-bdrv_ina.patch [bz#1520824]
- kvm-io-send-proper-HTTP-response-for-websocket-errors.patch [bz#1518649]
- kvm-io-include-full-error-message-in-websocket-handshake.patch [bz#1518649]
- kvm-io-use-case-insensitive-check-for-Connection-Upgrade.patch [bz#1518649]
- kvm-ui-Always-remove-an-old-VNC-channel-watch-before-add.patch [bz#1518649]
- kvm-io-Small-updates-in-preparation-for-websocket-change.patch [bz#1518649]
- kvm-io-Add-support-for-fragmented-websocket-binary-frame.patch [bz#1518649]
- kvm-io-Allow-empty-websocket-payload.patch [bz#1518649]
- kvm-io-Ignore-websocket-PING-and-PONG-frames.patch [bz#1518649]
- kvm-io-Reply-to-ping-frames.patch [bz#1518649]
- kvm-io-Attempt-to-send-websocket-close-messages-to-clien.patch [bz#1518649]
- kvm-io-add-trace-events-for-websockets-frame-handling.patch [bz#1518649]
- kvm-io-monitor-encoutput-buffer-size-from-websocket-GSou.patch [bz#1518650]
- kvm-io-simplify-websocket-ping-reply-handling.patch [bz#1518649]
- kvm-io-get-rid-of-qio_channel_websock_encode-helper-meth.patch [bz#1518649]
- kvm-io-pass-a-struct-iovec-into-qio_channel_websock_enco.patch [bz#1518649]
- kvm-io-get-rid-of-bounce-buffering-in-websock-write-path.patch [bz#1518649]
- kvm-io-cope-with-websock-Connection-header-having-multip.patch [bz#1518649]
- kvm-io-add-trace-points-for-websocket-HTTP-protocol-head.patch [bz#1518649]
- kvm-io-fix-mem-leak-in-websock-error-path.patch [bz#1518649]
- kvm-io-Add-missing-GCC_FMT_ATTR-fix-Werror-suggest-attri.patch [bz#1518649]
- kvm-qemu.py-make-VM-a-context-manager.patch [bz#1519721]
- kvm-iotests.py-add-FilePath-context-manager.patch [bz#1519721]
- kvm-qemu-iothread-IOThread-supports-the-GMainContext-eve.patch [bz#1519721]
- kvm-qom-provide-root-container-for-internal-objs.patch [bz#1519721]
- kvm-iothread-provide-helpers-for-internal-use.patch [bz#1519721]
- kvm-iothread-export-iothread_stop.patch [bz#1519721]
- kvm-iothread-delay-the-context-release-to-finalize.patch [bz#1519721]
- kvm-aio-fix-assert-when-remove-poll-during-destroy.patch [bz#1519721]
- kvm-blockdev-hold-AioContext-for-bdrv_unref-in-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-drive_bac.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-blockdev_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-internal_.patch [bz#1519721]
- kvm-iothread-add-iothread_by_id-API.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-testing-command.patch [bz#1519721]
- kvm-qemu-iotests-add-202-external-snapshots-IOThread-tes.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-force-boolean.patch [bz#1519721]
- kvm-iotests-add-VM.add_object.patch [bz#1519721]
- kvm-iothread-fix-iothread_stop-race-condition.patch [bz#1519721]
- kvm-qemu-iotests-add-203-savevm-with-IOThreads-test.patch [bz#1519721]
- Resolves: bz#1518649
  (Client compatibility flaws in VNC websockets server)
- Resolves: bz#1518650
  (CVE-2017-15268 qemu-kvm-rhev: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1519721
  (Both qemu and guest hang when performing live snapshot transaction with data-plane)
- Resolves: bz#1520824
  (Migration with dataplane, qemu processor hang, vm hang and migration can't finish)
- Resolves: bz#1525866
  (P9 to P8 guest migration fails when kernel is not started)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="153a00a093cbff9e27a08d7961236086389465ef104be2f0303c36880660c063" name="qemu-kvm-ma" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.3" date="1530532800">- kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1593193]
- kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1593193]
- kvm-s390x-fix-storage-attributes-migration-for-non-small.patch [bz#1596553]
- Resolves: bz#1593193
  (Pegas1.1 - SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-ma) [rhel-7.5.z])
- Resolves: bz#1596553
  (RHEL-Alt-7.5 - qemu has error during migration of larger guests [rhel-7.5.z])</changelog>
</package>
<package pkgid="2de47c84f7be07d3de968ded119fee53003a2783224c6ebf89d9298be5af15ab" name="qemu-kvm-ma" arch="src">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.3" date="1530532800">- kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1593193]
- kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1593193]
- kvm-s390x-fix-storage-attributes-migration-for-non-small.patch [bz#1596553]
- Resolves: bz#1593193
  (Pegas1.1 - SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-ma) [rhel-7.5.z])
- Resolves: bz#1596553
  (RHEL-Alt-7.5 - qemu has error during migration of larger guests [rhel-7.5.z])</changelog>
</package>
<package pkgid="83b194bd4d9e7e97bfa78f2eb308d25b06a874e07419910349d487909fb24cf2" name="qemu-kvm-ma-debuginfo" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-14.el7" date="1514894400">- kvm-spapr-don-t-initialize-PATB-entry-if-max-cpu-compat-.patch [bz#1525866]
- kvm-block-avoid-recursive-AioContext-acquire-in-bdrv_ina.patch [bz#1520824]
- kvm-io-send-proper-HTTP-response-for-websocket-errors.patch [bz#1518649]
- kvm-io-include-full-error-message-in-websocket-handshake.patch [bz#1518649]
- kvm-io-use-case-insensitive-check-for-Connection-Upgrade.patch [bz#1518649]
- kvm-ui-Always-remove-an-old-VNC-channel-watch-before-add.patch [bz#1518649]
- kvm-io-Small-updates-in-preparation-for-websocket-change.patch [bz#1518649]
- kvm-io-Add-support-for-fragmented-websocket-binary-frame.patch [bz#1518649]
- kvm-io-Allow-empty-websocket-payload.patch [bz#1518649]
- kvm-io-Ignore-websocket-PING-and-PONG-frames.patch [bz#1518649]
- kvm-io-Reply-to-ping-frames.patch [bz#1518649]
- kvm-io-Attempt-to-send-websocket-close-messages-to-clien.patch [bz#1518649]
- kvm-io-add-trace-events-for-websockets-frame-handling.patch [bz#1518649]
- kvm-io-monitor-encoutput-buffer-size-from-websocket-GSou.patch [bz#1518650]
- kvm-io-simplify-websocket-ping-reply-handling.patch [bz#1518649]
- kvm-io-get-rid-of-qio_channel_websock_encode-helper-meth.patch [bz#1518649]
- kvm-io-pass-a-struct-iovec-into-qio_channel_websock_enco.patch [bz#1518649]
- kvm-io-get-rid-of-bounce-buffering-in-websock-write-path.patch [bz#1518649]
- kvm-io-cope-with-websock-Connection-header-having-multip.patch [bz#1518649]
- kvm-io-add-trace-points-for-websocket-HTTP-protocol-head.patch [bz#1518649]
- kvm-io-fix-mem-leak-in-websock-error-path.patch [bz#1518649]
- kvm-io-Add-missing-GCC_FMT_ATTR-fix-Werror-suggest-attri.patch [bz#1518649]
- kvm-qemu.py-make-VM-a-context-manager.patch [bz#1519721]
- kvm-iotests.py-add-FilePath-context-manager.patch [bz#1519721]
- kvm-qemu-iothread-IOThread-supports-the-GMainContext-eve.patch [bz#1519721]
- kvm-qom-provide-root-container-for-internal-objs.patch [bz#1519721]
- kvm-iothread-provide-helpers-for-internal-use.patch [bz#1519721]
- kvm-iothread-export-iothread_stop.patch [bz#1519721]
- kvm-iothread-delay-the-context-release-to-finalize.patch [bz#1519721]
- kvm-aio-fix-assert-when-remove-poll-during-destroy.patch [bz#1519721]
- kvm-blockdev-hold-AioContext-for-bdrv_unref-in-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-drive_bac.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-blockdev_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-internal_.patch [bz#1519721]
- kvm-iothread-add-iothread_by_id-API.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-testing-command.patch [bz#1519721]
- kvm-qemu-iotests-add-202-external-snapshots-IOThread-tes.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-force-boolean.patch [bz#1519721]
- kvm-iotests-add-VM.add_object.patch [bz#1519721]
- kvm-iothread-fix-iothread_stop-race-condition.patch [bz#1519721]
- kvm-qemu-iotests-add-203-savevm-with-IOThreads-test.patch [bz#1519721]
- Resolves: bz#1518649
  (Client compatibility flaws in VNC websockets server)
- Resolves: bz#1518650
  (CVE-2017-15268 qemu-kvm-rhev: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1519721
  (Both qemu and guest hang when performing live snapshot transaction with data-plane)
- Resolves: bz#1520824
  (Migration with dataplane, qemu processor hang, vm hang and migration can't finish)
- Resolves: bz#1525866
  (P9 to P8 guest migration fails when kernel is not started)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="749a9783dae21d08bf54dc15d00f21dee7b50b7560b01d6dcbd8b9a178541d7a" name="qemu-kvm-ma-debuginfo" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.3" date="1530532800">- kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1593193]
- kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1593193]
- kvm-s390x-fix-storage-attributes-migration-for-non-small.patch [bz#1596553]
- Resolves: bz#1593193
  (Pegas1.1 - SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-ma) [rhel-7.5.z])
- Resolves: bz#1596553
  (RHEL-Alt-7.5 - qemu has error during migration of larger guests [rhel-7.5.z])</changelog>
</package>
<package pkgid="968c6d60012b5484d5a327747fc3fc33fbb5ce9ea47f76edb6b1d7578440e5dd" name="qemu-kvm-tools-ma" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.2"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-14.el7" date="1514894400">- kvm-spapr-don-t-initialize-PATB-entry-if-max-cpu-compat-.patch [bz#1525866]
- kvm-block-avoid-recursive-AioContext-acquire-in-bdrv_ina.patch [bz#1520824]
- kvm-io-send-proper-HTTP-response-for-websocket-errors.patch [bz#1518649]
- kvm-io-include-full-error-message-in-websocket-handshake.patch [bz#1518649]
- kvm-io-use-case-insensitive-check-for-Connection-Upgrade.patch [bz#1518649]
- kvm-ui-Always-remove-an-old-VNC-channel-watch-before-add.patch [bz#1518649]
- kvm-io-Small-updates-in-preparation-for-websocket-change.patch [bz#1518649]
- kvm-io-Add-support-for-fragmented-websocket-binary-frame.patch [bz#1518649]
- kvm-io-Allow-empty-websocket-payload.patch [bz#1518649]
- kvm-io-Ignore-websocket-PING-and-PONG-frames.patch [bz#1518649]
- kvm-io-Reply-to-ping-frames.patch [bz#1518649]
- kvm-io-Attempt-to-send-websocket-close-messages-to-clien.patch [bz#1518649]
- kvm-io-add-trace-events-for-websockets-frame-handling.patch [bz#1518649]
- kvm-io-monitor-encoutput-buffer-size-from-websocket-GSou.patch [bz#1518650]
- kvm-io-simplify-websocket-ping-reply-handling.patch [bz#1518649]
- kvm-io-get-rid-of-qio_channel_websock_encode-helper-meth.patch [bz#1518649]
- kvm-io-pass-a-struct-iovec-into-qio_channel_websock_enco.patch [bz#1518649]
- kvm-io-get-rid-of-bounce-buffering-in-websock-write-path.patch [bz#1518649]
- kvm-io-cope-with-websock-Connection-header-having-multip.patch [bz#1518649]
- kvm-io-add-trace-points-for-websocket-HTTP-protocol-head.patch [bz#1518649]
- kvm-io-fix-mem-leak-in-websock-error-path.patch [bz#1518649]
- kvm-io-Add-missing-GCC_FMT_ATTR-fix-Werror-suggest-attri.patch [bz#1518649]
- kvm-qemu.py-make-VM-a-context-manager.patch [bz#1519721]
- kvm-iotests.py-add-FilePath-context-manager.patch [bz#1519721]
- kvm-qemu-iothread-IOThread-supports-the-GMainContext-eve.patch [bz#1519721]
- kvm-qom-provide-root-container-for-internal-objs.patch [bz#1519721]
- kvm-iothread-provide-helpers-for-internal-use.patch [bz#1519721]
- kvm-iothread-export-iothread_stop.patch [bz#1519721]
- kvm-iothread-delay-the-context-release-to-finalize.patch [bz#1519721]
- kvm-aio-fix-assert-when-remove-poll-during-destroy.patch [bz#1519721]
- kvm-blockdev-hold-AioContext-for-bdrv_unref-in-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-external_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-drive_bac.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-blockdev_.patch [bz#1519721]
- kvm-block-don-t-keep-AioContext-acquired-after-internal_.patch [bz#1519721]
- kvm-iothread-add-iothread_by_id-API.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-testing-command.patch [bz#1519721]
- kvm-qemu-iotests-add-202-external-snapshots-IOThread-tes.patch [bz#1519721]
- kvm-blockdev-add-x-blockdev-set-iothread-force-boolean.patch [bz#1519721]
- kvm-iotests-add-VM.add_object.patch [bz#1519721]
- kvm-iothread-fix-iothread_stop-race-condition.patch [bz#1519721]
- kvm-qemu-iotests-add-203-savevm-with-IOThreads-test.patch [bz#1519721]
- Resolves: bz#1518649
  (Client compatibility flaws in VNC websockets server)
- Resolves: bz#1518650
  (CVE-2017-15268 qemu-kvm-rhev: Qemu: I/O: potential memory exhaustion via websock connection to VNC [rhel-7.5])
- Resolves: bz#1519721
  (Both qemu and guest hang when performing live snapshot transaction with data-plane)
- Resolves: bz#1520824
  (Migration with dataplane, qemu processor hang, vm hang and migration can't finish)
- Resolves: bz#1525866
  (P9 to P8 guest migration fails when kernel is not started)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
</package>
<package pkgid="c9b1c8847f1289ecf0c32f8ca28a4f49bde515270bf3c93ed97d6bf4da1c3fda" name="qemu-kvm-tools-ma" arch="ppc64le">
  <version epoch="10" ver="2.10.0" rel="21.el7_5.3"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-15.el7" date="1515067200">- kvm-target-i386-add-support-for-SPEC_CTRL-MSR.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPUID-bits-for-indirect-bran.patch [CVE-2017-5715]
- kvm-target-i386-cpu-add-new-CPU-models-for-indirect-bran.patch [CVE-2017-5715]</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-16.el7" date="1515412800">- kvm-gicv3-Convert-to-DEFINE_PROP_LINK.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Fix-the-VM-termination-in-vm_c.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-abort-on-table-save-fail.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Don-t-call-post_load-on-reset.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-a-minimalist-reset.patch [bz#1513323]
- kvm-linux-headers-Partial-header-update-against-v4.15-rc.patch [bz#1513323]
- kvm-hw-intc-arm_gicv3_its-Implement-full-reset.patch [bz#1513323]
- kvm-block-throttle-groups.c-allocate-RestartData-on-the-.patch [bz#1525868]
- kvm-redhat-Fix-permissions-of-dev-kvm-on-a-freshly-boote.patch [bz#1527947]
- Resolves: bz#1513323
  (vITS reset)
- Resolves: bz#1525868
  (Guest hit core dump with both IO throttling and data plane)
- Resolves: bz#1527947
  (Pegas1.1 - virsh domcapabilities doesn't report KVM capabilities on s390x)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-17.el7" date="1516104000">- kvm-tools-kvm_stat-fix-command-line-option-g.patch [bz#1529676]
- kvm-redhat-globally-limit-the-maximum-number-of-CPUs.patch [bz#1527449]
- kvm-redhat-remove-manual-max_cpus-limitations-for-ppc.patch [bz#1527449]
- kvm-dump-guest-memory.py-fix-You-can-t-do-that-without-a.patch [bz#1398633]
- kvm-hw-ppc-spapr.c-abort-unplug_request-if-previous-unpl.patch [bz#1528173]
- kvm-spapr-Correct-compatibility-mode-setting-for-hotplug.patch [bz#1528234]
- kvm-ui-fix-dcl-unregister.patch [bz#1510809]
- kvm-block-Open-backing-image-in-force-share-mode-for-siz.patch [bz#1526212]
- kvm-fw_cfg-fix-memory-corruption-when-all-fw_cfg-slots-a.patch [bz#1462145]
- kvm-block-Don-t-use-BLK_PERM_CONSISTENT_READ-for-format-.patch [bz#1515604]
- kvm-block-Don-t-request-I-O-permission-with-BDRV_O_NO_IO.patch [bz#1515604]
- kvm-block-Formats-don-t-need-CONSISTENT_READ-with-NO_IO.patch [bz#1515604]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1462145
  (Qemu crashes when all fw_cfg slots are used)
- Resolves: bz#1510809
  (qemu-kvm core dumped when booting up guest using both virtio-vga and VGA)
- Resolves: bz#1515604
  (qemu-img info: failed to get "consistent read" lock on a mirroring image)
- Resolves: bz#1526212
  (qemu-img should not need a write lock for creating the overlay image)
- Resolves: bz#1527449
  (qemu-kvm-ma: vCPU count should be limited to 240 on all arches)
- Resolves: bz#1528173
  (Hot-unplug memory  during booting early stage induced qemu-kvm coredump)
- Resolves: bz#1528234
  (Pegas1.1 Alpha: Hotplugged vcpu does not guarantee CPU P8compat mode on POWER9 host (qemu-kvm))
- Resolves: bz#1529676
  (kvm_stat: option '--guest' doesn't work)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-18.el7" date="1516708800">- kvm-serial-always-transmit-send-receive-buffers-on-migra.patch [bz#1459945]
- kvm-hw-acpi-Move-acpi_set_pci_info-to-pcihp.patch [bz#1507693]
- kvm-scsi-block-Add-share-rw-option.patch [bz#1518482]
- kvm-scsi-generic-Add-share-rw-option.patch [bz#1518482]
- kvm-target-i386-sanitize-x86-MSR_PAT-loaded-from-another.patch [bz#1529461]
- kvm-scsi-disk-release-AioContext-in-unaligned-WRITE-SAME.patch [bz#1526423]
- kvm-hw-pci-bridge-fix-QEMU-crash-because-of-pcie-root-po.patch [bz#1520858]
- kvm-spapr-Capabilities-infrastructure.patch [bz#1523414]
- kvm-spapr-Treat-Hardware-Transactional-Memory-HTM-as-an-.patch [bz#1523414]
- kvm-spapr-Validate-capabilities-on-migration.patch [bz#1523414]
- kvm-spapr-Handle-VMX-VSX-presence-as-an-spapr-capability.patch [bz#1523414]
- kvm-spapr-Handle-Decimal-Floating-Point-DFP-as-an-option.patch [bz#1523414]
- kvm-hw-ppc-spapr_caps-Rework-spapr_caps-to-use-uint8-int.patch [bz#1523414]
- kvm-spapr-Remove-unnecessary-options-field-from-sPAPRCap.patch [bz#1523414]
- kvm-ppc-Change-Power9-compat-table-to-support-at-most-8-.patch [bz#1529243]
- kvm-target-ppc-Clarify-compat-mode-max_threads-value.patch [bz#1529243]
- kvm-spapr-Allow-some-cases-where-we-can-t-set-VSMT-mode-.patch [bz#1529243]
- kvm-spapr-Adjust-default-VSMT-value-for-better-migration.patch [bz#1529243]
- kvm-qemu-img-info-Force-U-downstream.patch [bz#1535992]
- kvm-dump-guest-memory.py-fix-python-2-support.patch [bz#1398633]
- kvm-spapr-fix-device-tree-properties-when-using-compatib.patch [bz#1535752]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1459945
  (migration fails with hungup serial console reader on -M pc-i440fx-rhel7.0.0 and pc-i440fx-rhel7.1.0)
- Resolves: bz#1507693
  (Unable to hot plug device to VM reporting libvirt errors.)
- Resolves: bz#1518482
  ("share-rw" property is unavailable on scsi passthrough devices)
- Resolves: bz#1520858
  (qemu-kvm core dumped when booting guest with more pcie-root-ports than available slots and io-reserve=0)
- Resolves: bz#1523414
  ([POWER guests] Verify compatible CPU &amp; hypervisor capabilities across migration)
- Resolves: bz#1526423
  (QEMU hang with data plane enabled after some sg_write_same operations in guest)
- Resolves: bz#1529243
  (Migration from P9 to P8, migration failed and qemu quit on dst end with "error while loading state for instance 0x0 of device 'ics'")
- Resolves: bz#1529461
  (On amd hosts, after migration from rhel6.9.z to rhel7.5, CPU utilization of qemu-kvm is always more than 100% on destination rhel7.5 host)
- Resolves: bz#1535752
  (Device tree incorrectly advertises compatibility modes for secondary CPUs)
- Resolves: bz#1535992
  (Set force shared option "-U" as default option for "qemu-img info")</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-19.el7" date="1517572800">- kvm-Drop-105th-key-from-en-us-keymap.patch [bz#1513870]
- kvm-linux-headers-update.patch [bz#1535606]
- kvm-s390x-kvm-Handle-bpb-feature.patch [bz#1535606]
- kvm-s390x-kvm-provide-stfle.81.patch [bz#1535606]
- kvm-osdep-Retry-SETLK-upon-EINTR.patch [bz#1529053]
- kvm-vga-check-the-validation-of-memory-addr-when-draw-te.patch [bz#1534682]
- kvm-usb-storage-Fix-share-rw-option-parsing.patch [bz#1525324]
- kvm-spapr-disable-memory-hotplug.patch [bz#1535952]
- Resolves: bz#1513870
  (For VNC connection, characters '|' and '&lt;' are both recognized as '&gt;' in linux guests, while '&lt;' and '&gt;' are both recognized as '|' in windows guest)
- Resolves: bz#1525324
  (2 VMs both with 'share-rw=on' appending on '-device usb-storage' for the same source image can not be started at the same time)
- Resolves: bz#1529053
  (Miss the handling of EINTR in the fcntl calls made by QEMU)
- Resolves: bz#1534682
  (CVE-2018-5683 qemu-kvm-rhev: Qemu: Out-of-bounds read in vga_draw_text routine [rhel-7.5])
- Resolves: bz#1535606
  (Spectre mitigation patches for qemu-kvm-ma on z Systems)
- Resolves: bz#1535952
  (qemu-kvm-ma differentiation - memory hotplug)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-20.el7" date="1518004800">- kvm-console-fix-dpy_gfx_replace_surface-assert.patch [bz#1505696]
- kvm-ui-add-tracing-of-VNC-operations-related-to-QIOChann.patch [bz#1527404]
- kvm-ui-add-tracing-of-VNC-authentication-process.patch [bz#1527404]
- kvm-ui-remove-sync-parameter-from-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-unreachable-code-in-vnc_update_client.patch [bz#1527404]
- kvm-ui-remove-redundant-indentation-in-vnc_client_update.patch [bz#1527404]
- kvm-ui-avoid-pointless-VNC-updates-if-framebuffer-isn-t-.patch [bz#1527404]
- kvm-ui-track-how-much-decoded-data-we-consumed-when-doin.patch [bz#1527404]
- kvm-ui-introduce-enum-to-track-VNC-client-framebuffer-up.patch [bz#1527404]
- kvm-ui-correctly-reset-framebuffer-update-state-after-pr.patch [bz#1527404]
- kvm-ui-refactor-code-for-determining-if-an-update-should.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-audio-capture-is-a.patch [bz#1527404]
- kvm-ui-fix-VNC-client-throttling-when-forced-update-is-r.patch [bz#1527404]
- kvm-ui-place-a-hard-cap-on-VNC-server-output-buffer-size.patch [bz#1527404]
- kvm-ui-add-trace-events-related-to-VNC-client-throttling.patch [bz#1527404]
- kvm-ui-mix-misleading-comments-return-types-of-VNC-I-O-h.patch [bz#1527404]
- kvm-ui-avoid-sign-extension-using-client-width-height.patch [bz#1527404]
- kvm-ui-correctly-advance-output-buffer-when-writing-SASL.patch [bz#1527404]
- kvm-dump-guest-memory.py-skip-vmcoreinfo-section-if-not-.patch [bz#1398633]
- kvm-virtio-gpu-disallow-vIOMMU.patch [bz#1540182]
- Resolves: bz#1398633
  ([RFE] Kernel address space layout randomization [KASLR] support (qemu-kvm-rhev))
- Resolves: bz#1505696
  (Qemu crashed when open the second display of virtio video)
- Resolves: bz#1527404
  (CVE-2017-15124 qemu-kvm-rhev: Qemu: memory exhaustion through framebuffer update request message in VNC server [rhel-7.5])
- Resolves: bz#1540182
  (QEMU: disallow virtio-gpu to boot with vIOMMU)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 2.10.0-21.el7" date="1519128000">- kvm-migration-Recover-block-devices-if-failure-in-device.patch [bz#1538494]
- kvm-migration-savevm.c-set-MAX_VM_CMD_PACKAGED_SIZE-to-1.patch [bz#1540003]
- kvm-pci-bus-let-it-has-higher-migration-priority.patch [bz#1538953]
- kvm-spapr-set-vsmt-to-MAX-8-smp_threads.patch [bz#1542421]
- kvm-target-ppc-spapr_caps-Add-macro-to-generate-spapr_ca.patch [bz#1532050]
- kvm-target-ppc-kvm-Add-cap_ppc_safe_-cache-bounds_check-.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-support-for-tristate-spapr.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_cach.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_boun.patch [bz#1532050]
- kvm-target-ppc-spapr_caps-Add-new-tristate-cap-safe_indi.patch [bz#1532050]
- kvm-target-ppc-introduce-the-PPC_BIT-macro.patch [bz#1532050]
- kvm-target-ppc-spapr-Add-H-Call-H_GET_CPU_CHARACTERISTIC.patch [bz#1532050]
- kvm-spapr-add-missing-break-in-h_get_cpu_characteristics.patch [bz#1532050]
- kvm-vfio-pci-Add-option-to-disable-GeForce-quirks.patch [bz#1508330]
- kvm-Disable-GeForce-quirks-in-vfio-pci-for-RHEL-machines.patch [bz#1508330]
- Resolves: bz#1508330
  (Interrupt latency issues with vGPU on KVM hypervisor.)
- Resolves: bz#1532050
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-rhev} (rhel 7.5))
- Resolves: bz#1538494
  (Guest crashed on the source host when cancel migration by virDomainMigrateBegin3Params sometimes)
- Resolves: bz#1538953
  (IOTLB entry size mismatch before/after migration during DPDK PVP testing)
- Resolves: bz#1540003
  (Postcopy migration failed with "Unreasonably large packaged state")
- Resolves: bz#1542421
  (Pegas1.1 Snapshot1 [4.14.0-35.el7a.ppc64le] [qemu-kvm-ma-2.10.0-18.el7.ppc64le] qemu-kvm behaves incorrectly for guest boot with invalid threads)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.1" date="1521028800">- kvm-memory-inline-some-performance-sensitive-accessors.patch [bz#1554930]
- kvm-address_space_write-address_space_to_flatview-needs-.patch [bz#1554930]
- kvm-address_space_read-address_space_to_flatview-needs-R.patch [bz#1554930]
- kvm-address_space_access_valid-address_space_to_flatview.patch [bz#1554930]
- kvm-address_space_map-address_space_to_flatview-needs-RC.patch [bz#1554930]
- kvm-address_space_rw-address_space_to_flatview-needs-RCU.patch [bz#1554930]
- kvm-ppc-spapr-caps-Change-migration-macro-to-take-full-s.patch [bz#1554957]
- kvm-ppc-spapr-caps-Disallow-setting-workaround-for-spapr.patch [bz#1554957]
- kvm-target-ppc-Check-mask-when-setting-cap_ppc_safe_indi.patch [bz#1554957]
- kvm-ppc-spapr-caps-Add-support-for-custom-spapr_capabili.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-cfpc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-sbbc-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Convert-cap-ibs-to-custom-spapr-cap.patch [bz#1554957]
- kvm-ppc-spapr-caps-Define-the-pseries-2.12-sxxm-machine-.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.5-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.4-sxxm-machine-type.patch [bz#1554957]
- kvm-redhat-Define-the-pseries-rhel7.3-sxxm-machine-type.patch [bz#1554957]
- Resolves: bz#1554930
  (incorrect locking (possible use-after-free) with bug 1481593 fix [rhel-7.5.z])
- Resolves: bz#1554957
  ([CVE-2017-5754] Variant3: POWER {qemu-kvm-ma} Add machine type variants [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.2" date="1523620800">- kvm-block-Fix-flags-in-reopen-queue.patch [bz#1557206]
- kvm-iotests-Add-regression-test-for-commit-base-locking.patch [bz#1557206]
- kvm-vga-add-ram_addr_t-cast.patch [bz#1566878]
- kvm-vga-fix-region-calculation.patch [bz#1566878]
- Resolves: bz#1557206
  ([Regression] Cannot delete VM's snapshot [rhel-7.5.z])
- Resolves: bz#1566878
  (CVE-2018-7858 qemu-kvm-ma: Qemu: cirrus: OOB access when updating vga display [rhel-7] [rhel-7.5.z])</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - ma-2.10.0-21.el7_5.3" date="1530532800">- kvm-scsi-disk-allow-customizing-the-SCSI-version.patch [bz#1593193]
- kvm-hw-scsi-support-SCSI-2-passthrough-without-PI.patch [bz#1593193]
- kvm-s390x-fix-storage-attributes-migration-for-non-small.patch [bz#1596553]
- Resolves: bz#1593193
  (Pegas1.1 - SCSI pass-thru of aacraid RAID1 is inaccessible (qemu-kvm-ma) [rhel-7.5.z])
- Resolves: bz#1596553
  (RHEL-Alt-7.5 - qemu has error during migration of larger guests [rhel-7.5.z])</changelog>
</package>
<package pkgid="72c6533518e08336391c84afbe7530c80f7b694a1326b86a34fe253b0204afb2" name="radvd" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="f6d143d3382b3ab8e6b499da939f2a58b5c6423002ade213645efba3f84a8ce7" name="radvd" arch="src">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="275e18e289bf2050ee2d15fd1ac76cda97e0271a30c301e889dd29287c7f7440" name="radvd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.9.2" rel="9.el7_5.4"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.9.2-3" date="1360843200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-4" date="1386676800">- Resolves: #948863 - man page scan results for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-5" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-6" date="1388664000">- Resolves: #1045179 - use -fno-strict-aliasing for radvd</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.9.2-7" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-8" date="1429185600">- Resolves: #1180991 - use /usr/lib/tmpfiles.d instead of /etc/tmpfiles.d</changelog>
  <changelog author="Pavel &#x160;imerda &lt;psimerda@redhat.com&gt; - 1.9.2-9" date="1439812800">- Related: #1180991 - rebuilt</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.2" date="1521720000">- Resolves: #1564391 - Write pid file in nodaemon mode
- Fix coverity warnings</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.3" date="1523448000">- Related: 1564391 - Backport file locking and pidfile removal</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 1.9.2-9.4" date="1523534400">- Check pid file before running main flow
- Enable -Werror=all flag</changelog>
</package>
<package pkgid="582ce5616cac1a248571d47f2c2455ea46d1a67bc841eec4973c2666aa82b4f3" name="rasdaemon" arch="ppc64le">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="d75ba3505f74d7d4c42e72c69614173e0f69d56f44ee641ac8eb3e117256702a" name="rasdaemon" arch="src">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="97df0dab886d70a22cc3850411e1786f2ff4f5f9c8a2cf7656a7b4017cc84a00" name="rasdaemon-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.4.1" rel="33.1.el7_5"/>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-26.el7" date="1491912000">- add support for Skylake client and server [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-27.el7" date="1494244800">- Fixed error found by covscan in the last patch [1377467]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145600">- Identify as Knights Mill systems as such [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-28.el7" date="1496145601">- Bump release [1448113]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-29.el7" date="1503489600">- Updating Dell labels [1458938]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-30.el7" date="1508414400">- Updated project url [1502400]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-31.el7" date="1516795200">- Added ARM support [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-32.el7" date="1517572800">- Fixed covscan error [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.el7" date="1521460800">- Enabled not standard errors [1520602]</changelog>
  <changelog author="Aristeu Rozanski &lt;aris@redhat.com&gt; 0.4.1-33.1.el7" date="1522324800">- Refreshed build for zstream [1562017]</changelog>
</package>
<package pkgid="a1a2ebb65a681c4513c856a643f70412218d96aa7639cb954b20cdb8da893943" name="rdma-core" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="7132c644e09c3b8df280cc18efc3c60d68336b95095fdb216e5cf4023f091f7c" name="rdma-core" arch="src">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="3173b83fb916f19f5ed6a1e7157215e7e97f96db222c21bd520f69ce2b3dcc6a" name="rdma-core-debuginfo" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="42935240cdd827a64cee5f6b86b9ca363d3e08bd25e0d6d87c4033c2f7679a93" name="rdma-core-devel" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="cc079791978e56c510f4d62b3b5b6f80c4ac26b83ddcb0b6f645724abc0b7a54" name="rear" arch="ppc64le">
  <version epoch="0" ver="2.00" rel="7.el7_5"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-7" date="1531483200">- Backport upstream PR1383: Allow backup to be stored in ISO for ppc64/ppc64le
  Includes also commit 30099a98fdc1eab6373bc3682929bc4b9c09b54b.
  Resolves: #1596182</changelog>
</package>
<package pkgid="e52656b0d72c211603d15e4369d6626c195ef444ee2f7ef17861d4f289cb8ba1" name="rear" arch="src">
  <version epoch="0" ver="2.00" rel="7.el7_5"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-7" date="1531483200">- Backport upstream PR1383: Allow backup to be stored in ISO for ppc64/ppc64le
  Includes also commit 30099a98fdc1eab6373bc3682929bc4b9c09b54b.
  Resolves: #1596182</changelog>
</package>
<package pkgid="13c8a924d99ae3919340ef46ec462bd03f91c17b51d100a71307eba5cbddefa9" name="rear-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.00" rel="7.el7_5"/>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-4" date="1458734400">- Rear recovery over teaming interface will not work
Resolves: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-5" date="1458734401">- Remove backuped patched files
Related: #1283930</changelog>
  <changelog author="Petr Hracek &lt;phracek@redhat.com&gt; - 1.17.2-6" date="1468929600">- Replace experimental grep -P with grep -E
Resolves: #1290205</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-1" date="1487592000">- Rebase to version 2.00 
- Resolves #1355667</changelog>
  <changelog author="Jakub Mazanek &lt;jmazanek@redhat.com&gt; - 2.00-2" date="1495022400">- Excluding Archs s390 and s390x
- Related #1355667</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-3" date="1505304000">- Fix rear mkrescue on systems w/o UEFI. Upstream PR#1481 issue#1478
- Resolves: #1479002</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-4" date="1508760000">- Retry get_disk_size to fix upstream #1370, bz1388653</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-5" date="1515758400">- cd to the correct directory before md5sum to fix BACKUP_INTEGRITY_CHECK.
  Upstream PR#1685, bz1532676</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-6" date="1518609600">- Ensure that NetBackup is started automatically upon recovery (PR#1544)
  Also do not kill daemons spawned by sysinit.service at the service's end
  (PR#1610, applies to NetBackup and also to dhclient)
  Resolves #1506231
- Print a warning if grub2-mkimage is about to fail and suggest what to do.
  bz#1492177
- Update the patch for #1388653 to the one actually merged upstream (PR1418)</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.00-7" date="1531483200">- Backport upstream PR1383: Allow backup to be stored in ISO for ppc64/ppc64le
  Includes also commit 30099a98fdc1eab6373bc3682929bc4b9c09b54b.
  Resolves: #1596182</changelog>
</package>
<package pkgid="1137bc324c8409ebca0d98828f604912560dcb493b6b404c32c506c281104250" name="rsyslog" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="58df4ecf0abc41f7ef85fe010eb86d10c1498802ea12c94eef454edacf04a1ff" name="rsyslog" arch="src">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="b048b2a8c2b565f2eaaf1efb0802a5ecb9c3bc31739d0bba38fddf9c182fe0eb" name="rsyslog-crypto" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="d5319ce733af3b937370a88ab9bac80e76c445001995fdafe7347ccd0931b44e" name="rsyslog-debuginfo" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="156643ea778c6903862a21a74319ef80d097c9da367554a8c472a1c0c85e7c1c" name="rsyslog-doc" arch="noarch">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="48774b41fefa3d7dbd622950043587fe807e91efbcd3ef05e1d8fc4d6f0678b9" name="rsyslog-elasticsearch" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="3b56bbe1753bea469f9879b4f0b4c5c69673d3c9b1adf83e8579bdb9600973ef" name="rsyslog-gnutls" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="aba9b663edcc28850b4631cf0305e14a737eea55e3c9d9bc7eb9e2c375830bb2" name="rsyslog-gssapi" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="131a56ad77ff285cb3235e65178c9b6fbf5238ebed7a95e2493c4ab8aaba3296" name="rsyslog-libdbi" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="7a101136d3ba7497a748d333d60a0cfef047d4d832a4adc111fdf245b895d8ad" name="rsyslog-mmaudit" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="e904165d2e6c8a1d908b42bf3bb495aca61efe3bbc7ba1b9136a3310752093f3" name="rsyslog-mmjsonparse" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="cf1ad0b6b251ea076028d104d0445b2df996c45c06663eb9647fd83840efd3c7" name="rsyslog-mmnormalize" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="c7f6905a263f7755d5df658492e549d9bd3b4afbc674cc89f679e3f17d642b2d" name="rsyslog-mmsnmptrapd" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="3e6ba6dc97e83326762da7a89c089125ddb89256485c9246981c7cb2ddf9f916" name="rsyslog-mysql" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="97c9fcecd6bd6be8fc69de4e7784564521f3c7aa71dd5012cafeb459531f041e" name="rsyslog-pgsql" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="998815550c6e1dfe89dbec42732f61c425cfad7a58e8aa5db8b72074ef1a922c" name="rsyslog-relp" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="feccbc12bcdbf2011ae8880bf9495be7dda0b48e8f89d06ccc99149ce169066d" name="rsyslog-snmp" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="bdd7f6745db5d2e20808f55333a6a345ce3be4e135d0c98b88abe6578b058f69" name="rsyslog-udpspoof" arch="ppc64le">
  <version epoch="0" ver="8.24.0" rel="16.el7_5.4"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-8" date="1492603200">RHEL 7.4 ERRATUM
- added dependency automake autoconf libtool due to yum-builddep
- reenable omruleset module
  resolves: rhbz#1431615
  resolves: rhbz#1428403
  resolves: rhbz#1427821(fix regression, failed QA)
  resolves: rhbz#1432069
- resolves: rhbz#1165236
  resolves: rhbz#1419228
  resolves: rhbz#1431616 
  resolves: rhbz#1196230(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-9" date="1493726400">RHEL 7.4 ERRATUM
- added autoreconf call
- added patch to replace gethostbyname with getaddrinfo call
  resolves: rhbz#1056548(failed QA)</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-10" date="1493812800">RHEL 7.4 ERRATUM
- edited patches Patch19 and Patch21
  resolves: rhbz#1419228(coverity scan problems)
  resolves: rhbz#1056548(failed QA, coverity scan problems)</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-11" date="1494331200">RHEL 7.4 ERRATUM
- added new patch that backports num2ipv4 due to rhbz#1427821
  resolves: rhbz#1427821
- enable pmrfc3164sd module
  resolves: rhbz#1431616</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 8.24.0-12" date="1494417600">- added BuildRequires for systemd &gt;= 219-39 depends on rhbz#1419228</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-13" date="1507550400">RHEL 7.5 ERRATUM
- added patch to properly resolve FQDN
  resolves: rhbz#1401456
- added documentation patch correcting qeues default values
  resolves: rhbz#1459896
- added patch adjusting log level of journal reloaded msg
  resolves: rhbz#1497985 
- added patch to prevent crash with invalid set statement
  this also obsoletes patch2 (for 1188503) 
  resolves: rhbz#1462160
- added patch with nullptr check to prevent ABRT
  resolves: rhbz#1488186</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-14" date="1509451200">RHEL 7.5 ERRATUM
- renamed patch for undocumented recover_qi script to correct bz number
  resolves: rhbz#1507028
- added patch ensuring relp conneciton is active before closing it
  resolves: rhbz#1505103</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-15" date="1509451201">RHEL 7.5 ERRATUM
- made rsyslog-doc noarch and fixed search on doc regeneration
  resolves: rhbz#1507028</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16" date="1510228800">RHEL 7.5 ERRATUM
- edited the patch to conform to latest upstream doc
  resolves: rhbz#1459896 (failedQA)
- disabled 32-bit builds on all arches as they are not shipped
  anymore in RHEL7</changelog>
  <changelog author="Jiri Vymazal &lt;jvymazal@redhat.com&gt; - 8.24.0-16.5" date="1523880000">RHEL 7.5.z ERRATUM
- fixed imjournal duplicating msgs under some conditions
  resolves: rhbz#1545582</changelog>
</package>
<package pkgid="412d969ea1592c81938d819cabd8e858c05e8d1dfc5c30e845cdb49bf286f1cc" name="ruby-libguestfs" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="cd8a9c9d1dc432f29e4968fe0249bdae0a2aa70a90cadcd99e3e349979fc93ac" name="samba" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="9dca92edf34e7a835fd3b2947c7a9dc5513305fb26e73b99a1e3ba392a238c9a" name="samba" arch="src">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="4436a56923f140f75ad3afc82c9d3ee7bcfbf85b7a2063c68917326588c84181" name="samba-client" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="c4350e13c1773ceddd5b5811092f8ae0c779958f286ce0e7f9817213185ba4ac" name="samba-client-libs" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="45e3b9915b204150b686a39c33feb417ead81ea8734fdb3d20a6183ca4d8ab88" name="samba-common" arch="noarch">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="48adbe81c10c665ed437915d929961163e99515e58b7511edcc9d64c2d3601ad" name="samba-common-libs" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="6b36c15ac86abde4f01fc10c34eeb7529be317882f24865902bd007cc545c1a4" name="samba-common-tools" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="90ca028ae68d90561716d5b4af99a188b3ea961b443bd74dcbf7f461b23e1572" name="samba-dc" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="443efd5fdf4832c33f3ef62472aaa8536954c3a60759eaabdad64a6551b37b5d" name="samba-dc-libs" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="56c854341f1d63eab715c0003b050d23c9ab33519421ca9934fdc881970f3607" name="samba-debuginfo" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="39ef6dd7e98fa9f76a70292a676e268031f3122073cfcf5e578fdcf9e0e62935" name="samba-devel" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="a63ac6877da36fa8ab7c0f45859a1b5a6a02f78bd334d4235ace33b1f7bce984" name="samba-krb5-printing" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="9cd2127e51bc381ff605abd86eede0eb1ec11495d6112c4d8a460aedd5f49e6c" name="samba-libs" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="dd5e01c3a8fb47fe448056156f6273db46fbd3b4568416d48b5ba95b3c63e47c" name="samba-pidl" arch="noarch">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="93b0bfe9a505e3922c2243265c93d38f453bf97a21c4660c0f05b2984f2700b4" name="samba-python" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="c1f16c34a923f130a5679af183ac8a5b3232c370ea4353fad2c2af550e9ab531" name="samba-python-test" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="babdb26959624c17ea6462021455c46c43a20b73208f0fb8de28a6d7024c2771" name="samba-test" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="ac291d75ed10029d5479f740ea330e9412014a348886d6fe3caf74a980c4ab6a" name="samba-test-libs" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="16fd39d486682f36eeac3a2a1003bda51b16dd3142c15c2a19b31d6431c5f9ab" name="samba-winbind" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="6df52fc7948d1af4d49ee3f19bbe5c4f701e11819e1310a7e556d36c6fe1c2be" name="samba-winbind-clients" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="00012e937a3f92ea55444d6e195309f8a4dae002e9d14d24226500227fab8cea" name="samba-winbind-krb5-locator" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="7a5a486e1f20e3108279b36fe53e3c5c351960a231aeb6b81b525a09513e7c8b" name="samba-winbind-modules" arch="ppc64le">
  <version epoch="0" ver="4.7.1" rel="9.el7_5"/>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.0-4" date="1509019200">- resolves: #1506489 - Fix python dependency issues</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-1" date="1509624000">- related: #1470048 - Update to version 4.7.1</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-2" date="1510920000">- resolves: #1514316 - CVE-2017-14746 CVE-2017-15275</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-3" date="1511438400">- resolves: #1498353 - Fix broken MacOSX client which can't handle file_ids
                       correctly
- resolves: #1495490 - Fix client rename over SMB2
- resolves: #1510598 - Fix client volume cmd over SMB2</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-4" date="1511870400">- resolves: #1510872 - Fix systemd startup of samba daemons</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-5" date="1512388800">- resolves: #1505940 - Fix 'net ads keytab list'
- resolves: #1518732 - Enable AES-NI to make SMB3 encryption and signing
                       faster</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-6" date="1513771200">- resolves: #1476153 - Handle SMB echo responses more gracefully
- resolves: #1523212 - Fix SMB2 client read-after-free issue</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-7" date="1527076800">- resolves: #1581369 - Fix segfault updating dns during 'net ads join'
- resolves: #1581373 - Fix segfault during NT1 session setup
- resolves: #1581376 - Fix segfault in keytab handling
- resolves: #1581377 - Fix segfault in smbclient dfsgetinfo</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-8" date="1527508800">- resolves: #1582541 - Fix anyoumous and guest handling of SMB2/3</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 4.7.1-9" date="1530705600">- related: #1581375 - Remove patch which doesn't fully work</changelog>
</package>
<package pkgid="be23ef9bd847b33fc350d986765e828e0318214beea86c09aac9a141dc3a2253" name="scap-security-guide" arch="noarch">
  <version epoch="0" ver="0.1.36" rel="9.el7.centos"/>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-1" date="1509710400">- Update to upstream release 0.1.36
- Introduction of SCAP Security Guide Test Suite
- Better alignment of RHEL6 and RHEL7 with DISA STIG
- Remove JBoss EAP5 content due to being End-of-Life
- New STIG Profile for JBOSS EAP 6
- Updates in C2S Profile for RHEL 7
- Variables can be directly tailored in Ansible roles
- Content presents less false positives in containers
- Changes in directory layout</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-2" date="1509710401">- Fix configuration to not build new products introduced in upstream</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-3" date="1510660800">- Add DISA STIG Rule IDs to XCCDF Rules with STIGID</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-4" date="1510833600">- Rebuild with OpenSCAP 1.2.16</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.36-5" date="1512993600">- Patched not to check library ownership in libexec.
- Patched to fix title of DISA STIG profile.
- Patched to deprecate RhostsRSAAuthentication.
- Patched to fix umask_for_daemons.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-6" date="1513080000">- Rebuild with OpenSCAP 1.2.16</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-7" date="1515412800">- Fix sshd_required unset (RHBZ#1522956)
- Fix missing bash remediation functions include (RHBZ#1524738)
- Fix empty columns in SRG HTML Table (RHBZ#1531105)
- Fix reference to oudated PAM config manual (RHBZ#1447760)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-8" date="1524657600">- Allow AIDE to notify other emails than only root (RHBZ#1571315)
- Fix some failing rules from profiles PCI-DSS, DISA STIG and USGCB (RHBZ#1571312)
- Fix kernel module loading rules (RHBZ#1571319)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-9" date="1524830400">- Fix remediation of AIDE notification (RHBZ#1571315)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.1.36-9" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="860892281ff62e51c10b5344f3b150075a6f1c743d6f51dd6245b6fd816b0b6a" name="scap-security-guide" arch="src">
  <version epoch="0" ver="0.1.36" rel="9.el7.centos"/>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-1" date="1509710400">- Update to upstream release 0.1.36
- Introduction of SCAP Security Guide Test Suite
- Better alignment of RHEL6 and RHEL7 with DISA STIG
- Remove JBoss EAP5 content due to being End-of-Life
- New STIG Profile for JBOSS EAP 6
- Updates in C2S Profile for RHEL 7
- Variables can be directly tailored in Ansible roles
- Content presents less false positives in containers
- Changes in directory layout</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-2" date="1509710401">- Fix configuration to not build new products introduced in upstream</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-3" date="1510660800">- Add DISA STIG Rule IDs to XCCDF Rules with STIGID</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-4" date="1510833600">- Rebuild with OpenSCAP 1.2.16</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.36-5" date="1512993600">- Patched not to check library ownership in libexec.
- Patched to fix title of DISA STIG profile.
- Patched to deprecate RhostsRSAAuthentication.
- Patched to fix umask_for_daemons.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-6" date="1513080000">- Rebuild with OpenSCAP 1.2.16</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-7" date="1515412800">- Fix sshd_required unset (RHBZ#1522956)
- Fix missing bash remediation functions include (RHBZ#1524738)
- Fix empty columns in SRG HTML Table (RHBZ#1531105)
- Fix reference to oudated PAM config manual (RHBZ#1447760)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-8" date="1524657600">- Allow AIDE to notify other emails than only root (RHBZ#1571315)
- Fix some failing rules from profiles PCI-DSS, DISA STIG and USGCB (RHBZ#1571312)
- Fix kernel module loading rules (RHBZ#1571319)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-9" date="1524830400">- Fix remediation of AIDE notification (RHBZ#1571315)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.1.36-9" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="d4ca4ab658f85d33c410df3d9edc34376eb798d2b04a1c03d46decf25451ba21" name="scap-security-guide-doc" arch="noarch">
  <version epoch="0" ver="0.1.36" rel="9.el7.centos"/>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-1" date="1509710400">- Update to upstream release 0.1.36
- Introduction of SCAP Security Guide Test Suite
- Better alignment of RHEL6 and RHEL7 with DISA STIG
- Remove JBoss EAP5 content due to being End-of-Life
- New STIG Profile for JBOSS EAP 6
- Updates in C2S Profile for RHEL 7
- Variables can be directly tailored in Ansible roles
- Content presents less false positives in containers
- Changes in directory layout</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-2" date="1509710401">- Fix configuration to not build new products introduced in upstream</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-3" date="1510660800">- Add DISA STIG Rule IDs to XCCDF Rules with STIGID</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-4" date="1510833600">- Rebuild with OpenSCAP 1.2.16</changelog>
  <changelog author="Mat&#x11B;j T&#xFD;&#x10D; &lt;matyc@redhat.com&gt; - 0.1.36-5" date="1512993600">- Patched not to check library ownership in libexec.
- Patched to fix title of DISA STIG profile.
- Patched to deprecate RhostsRSAAuthentication.
- Patched to fix umask_for_daemons.</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-6" date="1513080000">- Rebuild with OpenSCAP 1.2.16</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-7" date="1515412800">- Fix sshd_required unset (RHBZ#1522956)
- Fix missing bash remediation functions include (RHBZ#1524738)
- Fix empty columns in SRG HTML Table (RHBZ#1531105)
- Fix reference to oudated PAM config manual (RHBZ#1447760)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-8" date="1524657600">- Allow AIDE to notify other emails than only root (RHBZ#1571315)
- Fix some failing rules from profiles PCI-DSS, DISA STIG and USGCB (RHBZ#1571312)
- Fix kernel module loading rules (RHBZ#1571319)</changelog>
  <changelog author="Watson Yuuma Sato &lt;wsato@redhat.com&gt; - 0.1.36-9" date="1524830400">- Fix remediation of AIDE notification (RHBZ#1571315)</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 0.1.36-9" date="1526299200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="98acf28fb33f9ea204a0062e677b313074c5539f1479e68d1544db946bc1f539" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="ec7af3c402ea3a01602403c395bfcf39f585ba1ba9f95b7d5059e2634c2cbdce" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="452848b226beceed820cafa53a18129fa5ca7f5c3c11e8fcac008ef3f8bad9ca" name="selinux-policy" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004800">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.5" date="1530273600">- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1596730</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.6" date="1533038400">- Allow virtlogd_t domain to chat via dbus with systemd_logind
Resolves: rhbz#1593740</changelog>
</package>
<package pkgid="922f006f98f3853876eba8e1191f19325d6ffd13a42a8b3a0219bfd342190c29" name="selinux-policy" arch="src">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004800">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.5" date="1530273600">- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1596730</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.6" date="1533038400">- Allow virtlogd_t domain to chat via dbus with systemd_logind
Resolves: rhbz#1593740</changelog>
</package>
<package pkgid="0e6b3655ebf8773221c2d858393cd9835fdafc76158d6107fca5cbc749fdea90" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="402cf2ab9c9dd005310e954bd1a3f0de3bcab8c9e85aa565b446c74f99387492" name="selinux-policy-devel" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004800">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.5" date="1530273600">- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1596730</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.6" date="1533038400">- Allow virtlogd_t domain to chat via dbus with systemd_logind
Resolves: rhbz#1593740</changelog>
</package>
<package pkgid="3f235cc3f644d72401e7b32919e3385809172b8e8e57173b9d7cb20562234fc9" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="9f05c234aa79a093d60c495964041d632f08027719e8130e702692eebe253f47" name="selinux-policy-doc" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004800">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.5" date="1530273600">- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1596730</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.6" date="1533038400">- Allow virtlogd_t domain to chat via dbus with systemd_logind
Resolves: rhbz#1593740</changelog>
</package>
<package pkgid="14f870d98636bf3b542b4bdfd4725e1ccfa667269f3537bc12f614b48f56c77f" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="74dca30a0889fc490005bc29f56241a0ab2d5f89dec6321f610d2e5daf9d2894" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004800">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.5" date="1530273600">- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1596730</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.6" date="1533038400">- Allow virtlogd_t domain to chat via dbus with systemd_logind
Resolves: rhbz#1593740</changelog>
</package>
<package pkgid="f3e90f7ae4893e1b83f11016ca2f8408687fcba1ae87ff559c705ff91d83122f" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="1322f0501518d35484404e6657c22986c3e0e1d4658ecd3501b8ca4534928d9c" name="selinux-policy-mls" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004800">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.5" date="1530273600">- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1596730</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.6" date="1533038400">- Allow virtlogd_t domain to chat via dbus with systemd_logind
Resolves: rhbz#1593740</changelog>
</package>
<package pkgid="6d09bb5ce608546d24073fb669439c526ef7dfb0ca67b8710d7ddd0fa1351cce" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="15a9c7bfd178349483d658befdeb9cad59832350b8687fa650abe73c49e6f88e" name="selinux-policy-sandbox" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004800">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.5" date="1530273600">- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1596730</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.6" date="1533038400">- Allow virtlogd_t domain to chat via dbus with systemd_logind
Resolves: rhbz#1593740</changelog>
</package>
<package pkgid="1a2965df62e6ddd94bd12cddf2548dae0b922006a7d280cae85d23a50967828f" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.4"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-187" date="1517918400">- Allow openvswitch_t domain to read cpuid, write to sysfs files and creating openvswitch_tmp_t sockets
Resolves: rhbz#1535196
- Add new interface ppp_filetrans_named_content()
Resolves: rhbz#1530601
- Allow keepalived_t read sysctl_net_t files
Resolves: rhbz#1477542
- Allow puppetmaster_t domtran to puppetagent_t
Resolves: rhbz#1376893
- Allow kdump_t domain to read kernel ring buffer
Resolves: rhbz#1540004
- Allow ipsec_t domain to exec ifconfig_exec_t binaries.
Resolves: rhbz#1539416
- Allow unconfined_domain_typ to create pppd_lock_t directory in /var/lock
Resolves: rhbz#1530601
- Allow updpwd_t domain to create files in /etc with shadow_t label
Resolves: rhbz#1412838
- Allow iptables sysctl load list support with SELinux enforced
Resolves: rhbz#1535572</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-188" date="1518004800">- Allow svirt_domain to create socket files in /tmp with label svirt_tmp_t
Resolves: rhbz#1540702
- Allow keepalived_t domain getattr proc filesystem
Resolves: rhbz#1477542
- Rename svirt_sandbox_file_t to container_file_t and svirt_lxc_net_t to container_t
Resolves: rhbz#1538544
- Allow ipsec_t nnp transistions to domains ipsec_mgmt_t and ifconfig_t
Resolves: rhbz:#1539416
- Allow systemd_logind_t domain to bind on dhcpd_port_t,pki_ca_port_t,flash_port_t
Resolves: rhbz#1479350</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004801">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
</package>
<package pkgid="27f2c2d5fa7e02d222ebb1e3a5974d4d2597ddf938305d0e184edd10d8bb5829" name="selinux-policy-targeted" arch="noarch">
  <version epoch="0" ver="3.13.1" rel="192.el7_5.6"/>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-189" date="1518004800">- Allow dirsrv_t domain to create tmp link files
Resolves: rhbz#1536011
- Label /usr/sbin/ldap-agent as dirsrv_snmp_exec_t
Resolves: rhbz#1428568
- Allow ipsec_mgmt_t execute ifconfig_exec_t binaries
- Allow ipsec_mgmt_t nnp domain transition to ifconfig_t
Resolves: rhbz#1539416</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-190" date="1518782400">- Allow openvswitch domain to manage svirt_tmp_t sock files
Resolves: rhbz#1540702
- Fix broken systemd_tmpfiles_run() interface</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-191" date="1519041600">- Allow openvswitch_t stream connect svirt_t
Resolves: rhbz#1540702</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192" date="1519732800">- Label /usr/libexec/dbus-1/dbus-daemon-launch-helper  as dbusd_exec_t to have systemd dbus services running in the correct domain instead of unconfined_service_t if unconfined.pp module is enabled.
Resolves: rhbz#1546721</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.1" date="1521633600">- Backport several changes for snapperdfrom Fedora Rawhide
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.2" date="1522065600">- Allow snapperd_t to set priority for kernel processes
Resolves: rhbz#1558656</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.3" date="1522238400">- Allow snapperd_t domain to unmount fs_t filesystems
Resolves: rhbz#1561424</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.4" date="1528372800">- Allow certmonger to sends emails
Resolves: rhbz#1588363</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.5" date="1530273600">- Allow virtlogd_t domain to write inhibit systemd pipes.
Resolves: rhbz#1596730</changelog>
  <changelog author="Lukas Vrabec &lt;lvrabec@redhat.com&gt; - 3.13.1-192.6" date="1533038400">- Allow virtlogd_t domain to chat via dbus with systemd_logind
Resolves: rhbz#1593740</changelog>
</package>
<package pkgid="2c067c9a936825b2f6ff6087de72145a2bbe15eeea1ea7923d09e36be0329473" name="sos" arch="noarch">
  <version epoch="0" ver="3.5" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-7.el7.centos" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="d7771ec4d5cf1dbaaa44547f2a30593192b41d198d2a420f78b40dc4187b3873" name="sos" arch="src">
  <version epoch="0" ver="3.5" rel="7.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-5" date="1496145600">- [samba] Fix dc-connect winbind logfile path
  Resolves: bz1400407</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-6" date="1499860800">- [tripleo] Add ui logs
  Resolves: bz1470573</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-7.el7.centos" date="1526299200">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="4491d7047424737630561d57da4887eb26b519597c7f4ef6f5b860a380163caf" name="sos" arch="noarch">
  <version epoch="0" ver="3.5" rel="9.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-8" date="1526904000">- [docker] backport three container related patches
  Resolves: bz1580526
- [ovn] add two OpenVSwitch plugins
  Resoles: bz1580525</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-9" date="1527768000">- [logs] collect journalctl verbosed logs with --all-logs only
  Resolves: bz1584548</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-9.el7.centos" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="5a78eb6ae5fa5d2bc48a84bc5c473c996d75602c607918072fcd6dc899e67b4a" name="sos" arch="src">
  <version epoch="0" ver="3.5" rel="9.el7.centos"/>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.4-7" date="1507636800">- [openstack plugins] Tripleo specific containerized services
  Resolves: bz1463635
- [jars] Scan only /usr/{share,lib}/java by default
  Resolves: bz1482574
- [gluster_block] Added new plugin gluster_block
  Resolves: bz1491964</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-1" date="1509624000">- New upstream release sos-3.5</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-2" date="1512734400">- [vdo] revise collected files
  Resolves: bz1509079
- further updates to OSP plugins in containerized environment
  Resolves: bz1506908
- [opendaylight] new plugin
  Resolves: bz1483414
- collect all keystone domains
  Resolves: bz1491042
- haproxy, etcd and docker tracebacks
  Resolves: bz1519267
- [origin] fix typo in oc adm diagnostics
  Resolves: bz1463509
- [postgresql] Call SCL pg_dump with proper path
  Resolves: bz1494420</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-4" date="1516104000">- [pcp] really apply sizelimit to logs collected
  Resolves: bz1353873
- [opendaylight] collect more logs and puppet config
  Resolves: bz1483414
- [plugins] allow add_cmd_output to collect binary output
  Resolves: bz1494420
- [openstack_ironic] collect drivers, ports and much more
  Resolves: bz1517767
- [openstack_cinder] check for api service running
  Resolves: bz1506908</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-5" date="1518523200">- [rabbitmq] Log collection when run in containerized OSP
  Resolves: bz1525620
- [ipa] add KRA logs and correct PKI directories
  Resolves: bz1535390
- [opendaylight] Enable plugin by puppet-opendaylight package
  Resolves: bz1483414
- [etcd] Do not collect private etcd keys
  Resolves: bz1539038</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-6" date="1518523201">- [ipa] set ipa_version variable before referencing it
  Resolves: bz1535390</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-7" date="1524052800">- [kernel] Disable gathering /proc/timer* statistics
  Resolves: bz1568884
- [openstack_octavia] Add new plugin
  Resolves: bz1568882
- [ovirt-provider-ovn] A new plugin
  Resolves: bz1568960</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-8" date="1526904000">- [docker] backport three container related patches
  Resolves: bz1580526
- [ovn] add two OpenVSwitch plugins
  Resoles: bz1580525</changelog>
  <changelog author="Pavel Moravec &lt;pmoravec@redhat.com&gt; = 3.5-9" date="1527768000">- [logs] collect journalctl verbosed logs with --all-logs only
  Resolves: bz1584548</changelog>
  <changelog author="CentOS Sources &lt;bugs@centos.org&gt; - 3.5-9.el7.centos" date="1530014400">- Roll in CentOS Branding</changelog>
</package>
<package pkgid="df59fa656c333ba95b3b6d2a8eb0ad5aed3c644a63f3131948f38a5f00c99932" name="spice-glib" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="b6c33ab8f98c0c5b8c3367c9524de7ee0c6c9930ed2efe6deadbfe52c74d9949" name="spice-glib-devel" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="0b296b1009afa14f213ed61109e0bb88e53ccd515954e69f085321654165f435" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="c88609e74ae40f45019197209db0015b62402a3614ac0b06f5972ebd90c7a6f3" name="spice-gtk-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="903a41dd51f5527d4275d94292728ceffd76a2a0b6294bad540af924b29918ef" name="spice-gtk-tools" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="2841a574b0b9dc5a161a74c30f1e198a9519680c570880728f4434a50d52123e" name="spice-gtk3" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="89ff01a5df6b84e9df22424708b96a4a069511e6ef225117557cef9711f7b02e" name="spice-gtk3-devel" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="0482ba106a226d7cebfbf0d39a9ed1176dd385ded42a57b4c9dc332d62ed1d3d" name="spice-gtk3-vala" arch="ppc64le">
  <version epoch="0" ver="0.34" rel="3.el7_5.1"/>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-2" date="1490616000">- Add missing patch for rebase
  Resolves: rhbz#1402474
- Add obsoletes to the spec file to ease updates
  Resolves: rhbz#1432776
- Fix black screen in virt-manager
  Resolves: rhbz#1433242
- Make connection error message more clear
  Resolves: rhbz#1365736</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.33-3" date="1491912000">- Avoid CRITICALs on copy-paste
  Resolves: rhbz#1440096
- Avoid assertions on file-xfer while agent disconnects
  Related: rhbz#1440096</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-4" date="1494417600">- Make connection error message more clear
  Resolves: rhbz#1365736
- Improve audio debug
  Resolves: rhbz#1436249
- Fix wrong encoding of transferred files
  Resolves: rhbz#1440206</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-5" date="1495713600">- Enable hardened build flags
  Resolves: rhbz#1420778</changelog>
  <changelog author="Pavel Grunt &lt;pgrunt@redhat.com&gt; - 0.33-6" date="1496836800">- Fix capslock regression
  Resolves: rhbz#1458730</changelog>
  <changelog author="Jonathon Jongsma &lt;jjongsma@redhat.com&gt; - 0.33-7" date="1500033600">- build with opus support
  Resolves: rhbz#1456849</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-1" date="1505217600">- Rebase to 0.34
  Resolves: rhbz#1472730</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-2" date="1510660800">- Enable lz4
  Resolves: rhbz#1460198</changelog>
  <changelog author="Frediano Ziglio &lt;fziglio@redhat.com&gt; - 0.34-3" date="1513857600">- Fix stride misalignment
  Resolves: rhbz#1508847</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 0.34-3.1" date="1528891200">- Fix migration failure when USB is enabled
  Resolves: rhbz#1590412</changelog>
</package>
<package pkgid="83d44f5cf83603e99a10559cf711ca9eb227b11f8f82b97563c54a688e437cc9" name="srp_daemon" arch="ppc64le">
  <version epoch="0" ver="15" rel="7.el7_5"/>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 13-5" date="1493208000">- rdma-ndd: Fix a busy loop for aarch64 platform
- Resolves: bz1442789</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-6" date="1495454400">- Clean up htonll/ntohll handling for opa-ff/infiniband-diags compile
- Add necessary Provides/Obsoletes for old -static packages
- Remove ibverbs providers that we aren't currently able to support
- Resolves: rhbz#1453096, rhbz#1451607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 13-7" date="1496145600">- Add support for mlx5 Expand raw packet capabilities
- Resolves: rhbz#1456561</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-1" date="1506081600">- Update to upstream v15 release
- Resolves: rhbz#1494607</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-2" date="1510574400">- Fix ibacm segfault and improper multicast handling
- Resolves: rhbz#1502745
- Resolves: rhbz#1502759</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; 15-3" date="1514289600">- srp_daemon: Don't create async_ev_thread if only run once
- srp_daemon: Remove unsupported systemd configurations
- srp_daemon: Start srp_daemon service after network target
- Resolves: bz1525193
- Resolves: bz1528671</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-4" date="1516017600">- Add support for extended join multicast API in librdmacm
- Add support for striding RQ on mlx5
- Resolves: rhbz#1515487, rhbz#1516571</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-5" date="1517918400">- libmlx4: report RSS caps for improved DPDK support
- Fix double mutex unlock in iwpmd
- Resolves: rhbz#1527350
- Resolves: rhbz#1542362</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-6" date="1519041600">- libbnxt_re: fix lat test failure in event mode
- Resolves: rhbz#1545248</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; 15-7" date="1519732800">- i40iw: revoke systemd udev rules auto-load on i40e hardware, due to
  causing problems with suspend and resume, and fall back to load via
  systemd rdma initscript.
- Resolves: rhbz#1568325</changelog>
</package>
<package pkgid="307587b1a39a143a2793143831750a87be3057cccb7a31642fdfe3dc7fca949f" name="sssd" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="42979fc09dfda8a618197a526b8c74a8d5419332d4505bae885baa18f41540ca" name="sssd" arch="src">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="9b95f1632169aa7243a5346dd06d615a3e892819f595c40a4402cbe1fe89976a" name="sssd-ad" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="f6315264c96099ec9b898b509f8d01bb6137883b1abffa43da6e3f251825ffab" name="sssd-client" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="df074c105ddef43aefbeb0d1405d8077aee0d6b67fadd02e1bd4d887175cc79a" name="sssd-common" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="182a1537dbef15a9d4ac7d51d311639c9b7e45db1fe715dbb0d7411ec3d3904d" name="sssd-common-pac" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="950a237bf84638784d031920e7116ab896c4610682cea33ee0e14537ef6a7477" name="sssd-dbus" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="774c8f13ec62d3dd77639731388fa247186c8d0128a2e50d35b461e6491009dd" name="sssd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="58a131138ba856464791a2a2f842be548a3c8d947b5d10e201bbdf38f9962e05" name="sssd-ipa" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="64f9a59adb5e4c7d313a2d0f6882380f77346822348d42f4798ea7ac18fe7c0b" name="sssd-kcm" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="6a65cb38a632e464a02a723cf74ac1ccb4d6203b68c533dd51e51fe713b5b5ad" name="sssd-krb5" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="1767332951f505efee57f4819b4bdb39117c2ef49a04ea49e84a8ead5e765b1c" name="sssd-krb5-common" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="55ed3e546d1ebf3e40a29c043f11730ab82d83b0a86c204916d303e607214a0f" name="sssd-ldap" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="f27aac39bfee33625a3acfe153828a0f91e8214b7493acfe9fa7afbef086d7e5" name="sssd-libwbclient" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="1bb41b2176f9480f7a6033b77d6de8fa19dd532b416f2905a5f4d24fee60472c" name="sssd-libwbclient-devel" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="17709d67bf4dba1522de204c8772c82c66b68e05031335ed9d51678afe1742a3" name="sssd-polkit-rules" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="5990e2a7c950797ccc50a2b928f5cb2fa5baaa3d4c08b268fd1802c691f84311" name="sssd-proxy" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="e8a7cc2e673425b90917ed19cc3ab36efc0771db607a670663c483af44c9a511" name="sssd-tools" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="1af9eb9e61e5209290ad9ab0c1f049b24b4071e1f5206ddf67da66e821c7ec5b" name="sssd-winbind-idmap" arch="ppc64le">
  <version epoch="0" ver="1.16.0" rel="19.el7_5.5"/>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-15" date="1516795200">- Resolves: rhbz#1517971 - AD Domain goes offline immediately during
                           subdomain initialization - IPA AD Trust
- Related: rhbz#1482555 - sysdb index improvements - missing ghost
                          attribute indexing, unneeded objectclass index
                          etc..
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]
- Resolves: rhbz#1527149 - AD provider - AD BUILTIN groups are cached with
                           gidNumber = 0
- Related: rhbz#1461899 - Loading enterprise principals doesn't work with
                          a primed cache
- Related: rhbz#1473571 - ipa-extdom-extop plugin can exhaust DS worker
                          threads</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-16" date="1517918400">- Resolves: rhbz#1538643 - SSSD crashes when retrieving a Desktop Profile
                           with no specific host/hostgroup set
- Related: rhbz#1441908 - SELINUX: Use getseuserbyname to get IPA seuser
- Related: rhbz#1327705 - [RFE] Automatic creation of user private groups
                          on RHEL clients joined to AD via sssd [RHEL 7]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-17" date="1519041600">- Resolves: rhbz#1523282 - sssd used wrong search base with wrong AD
                           server</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-18" date="1519214400">- Resolves: rhbz#1543348 - sssd_be consumes more memory on RHEL 7.4 systems.
- Resolves: rhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19" date="1519214401">- Related: rhbzrhbz#1544943 - sssd goes offline when renewing expired ticket</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.1" date="1524484800">- Resolves: rhbz#1570527 - memory management issue in the sssd_nss_ex interface can cause the ns-slapd process on IPA server to crash [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.2" date="1526644800">- Resolves: rhbz#1579703 - crash in nss_protocol_fill_netgrent. sssd_nss[19234]: segfault at 80 ip 000055612688c2a0 sp 00007ffddf9b9cd0 error 4 in sssd_nss[55612687e000+39000] [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.3" date="1526644801">- Resolves: rhbz#1579780 - After updating to RHEL 7.5 failing to clear the sssd cache [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.4" date="1526904000">- Resolves: rhbz#1580281 - Samba can not register sss idmap module because it's using an outdated SMB_IDMAP_INTERFACE_VERSION [rhel-7.5.z]</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.16.0-19.5" date="1527768000">- Resolves: rhbz#1583746 - The SSSD IPA provider allocates information about external groups on a long lived memory context, causing memory growth of the sssd_be process [rhel-7.5.z]</changelog>
</package>
<package pkgid="b5af0fd1abdb800cbc46423ab4bccd6f49e629083c114ba9a29cb8b1f8c3e650" name="sudo" arch="ppc64le">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="2632cc7dcf4850f3ab2b4203c893508033ecb17bfc358cdd6711b25a869e1c5e" name="sudo" arch="src">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="b6044f21453111902fb2bd184111767f80ba88ce99db35cf7e3476ebc2ec1033" name="sudo-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="ef6666c9f250253575e27805bf7b605b439b59577298227c68939f06d0920264" name="sudo-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.19p2" rel="14.el7_5"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-5" date="1493121600">- RHEL 7.4 erratum
- added doc patch about sudo lookup issue
  Resolves: rhbz#1293306
- added test suite patch
  Resolves: rhbz#1360687
- fixed use after free fqdn problem
  Resolves: rhbz#1360687</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-6" date="1493899200">- RHEL 7.4 erratum
- added patch that fixes lecture option used as bolean
  Resolves rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-7" date="1495540800">- RHEL 7.4 erratum
- added patch to fix output truncation (in some cases) when log_output
  option is enabled
  Resolves: rhbz#1454571</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.8.19p2-8" date="1495713600">- RHEL 7.4 erratum
- Fixes CVE-2017-1000367: Privilege escalation in via improper get_process_ttyname() parsing
  Resolves: rhbz#1455402</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.8.19p2-9" date="1496750400">- RHEL 7.4 erratum
- removed patch for output truncation (1454571) which introduced regression
  Resolves: rhbz#1360687</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-10" date="1496836800">- RHEL 7.4 erratum
- Fix CVE-2017-1000368
  Resolves: rhbz#1459411</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-11" date="1502712000">- Moved libsudo_util.so from the -devel sub-package to main package
  Resolves: rhbz#1481225</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-12" date="1506945600">- RHEL 7.5 erratum
- Fixed exit codes for `sudo -l -U &lt;user&gt;`
- Fixed truncated output when log_output is enabled
- Updated use_pty and IO logging manpage

  Resolves: rhbz#1458696
  Resolves: rhbz#1454571
  Resolves: rhbz#1490358

- Fixed second pass LDAP filter expression in the sudoers ldap backend
  - inclomplete patch for rhbz#1485397</changelog>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; 1.8.19p2-13" date="1512043200">- RHEL 7.5 erratum
- Fixed sudo -l checking results whether user should be authenticated
- Enabled LDAP filter patch
- Fixed double free in sssd

  Resolves: rhbz#1505409
  Resolves: rhbz#1511850
  Resolves: rhbz#1518104</changelog>
  <changelog author="Daniel Kopecek &lt;dkopecek@redhat.com&gt; - 1.8.19p2-14" date="1527508800">- Fixed deadlocking after command termination when iolog is enabled
  Resolves: rhbz#1582155</changelog>
</package>
<package pkgid="e5ceba26c97e56cb3806ba1210fc0f795e31b0c8e6d5ed10d65ce6cef32ae6b5" name="systemd" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="fde95be97eb4b3fe1819071b4066b1b363f3f0bd56437c691676b5ffc7097849" name="systemd" arch="src">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="8a058aeb13af5ea7d52a336dc6806455405ff4977d39fc8a2842be12de1d3328" name="systemd-debuginfo" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="03261e81d6f33039469225b07c49ead4da8c1a4e9b29c73dd6aeb401e66b908a" name="systemd-devel" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="c774f11591df2f141a3f7cfc2af9ce00daa73f705dfc14a1a233e53dcd384796" name="systemd-journal-gateway" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="6e6b8e285ad4f97625be7c0b6346030209705189587bc759296a9d2ba6bc477f" name="systemd-libs" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="89b613e61bbfe6f633c60e10eb3d7d0b30b1d877c4b6d7a9835ea8c256f744c7" name="systemd-networkd" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="b1f49f012d7abfc1ddc089929b29fa7c520e7105f43595caa6fed97d607e74e3" name="systemd-python" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="8ce925a63d88f381962ea8a0ce8998471d07b65ec84b9212a9b17785ec578fc0" name="systemd-resolved" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="20d57e5ced22a0b5ad5e1ec725000e8757f322696000fd70b3aa10ad4574a1da" name="systemd-sysv" arch="ppc64le">
  <version epoch="0" ver="219" rel="57.el7_5.1"/>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-49" date="1511524800">- journald: fix accuracy of watchdog timer event (#1511565)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-50" date="1512388800">- core: fix the reversed sanity check when setting StartupBlockIOWeight over dbus (#1302305)
- shared/dropin: ignore ENAMETOOLONG when checking drop-in directories (#7525) (#1489095)
- enable display manager only on systemd installation (#1464893)
- remove unnecessary dependency on dracut (#1466676)
- substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Luk&#xE1;&#x161; Nykr&#xFD;n &lt;lnykryn@redhat.com&gt; - 219-51" date="1512475200">- revert substitute PACKAGE_STRING with the actual package NVR (#1453153)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-52" date="1513252800">- cryptsetup: when unlocking always put path to the object into Id (#1511043)
- cryptsetup: use more descriptive name for the variable and drop redundant function (#1511043)
- cryptsetup-generator: do not bind to the decrypted device unit (#6538) (#1511043)
- introduce naming based on phys_port_name for nfp via udev rule (#1516283)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-53" date="1515499200">- shared/cgroup-utils: _CGROUP_CONTROLLER_MASK_ALL does not cover CGROUP_PIDS (#1532586)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-54" date="1517918400">- automount: ack automount requests even when already mounted (#1535135)
- udev: net_id add support for platform bus (ACPI, mostly arm64) devices (#1529633)
- journald-native: Fix typo in MANDLOCK message (#1501017)
- process-util: make our freeze() routine do something useful (#1540941)
- dbus: propagate errors from bus_init_system() and bus_init_api() (#1541061)
- bus-util.c: fix TasksMax= property assignment (#1537147)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-55" date="1518004800">- sparse: avoid clash with __bitwise and __force from 4.10 linux/types.h (#5061) (#1447937)
- core: Let two more booleans survive a daemon-reload (#1542391)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-56" date="1519041600">- core: don't choke if a unit another unit triggers vanishes during reload (#1545676)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57" date="1519128000">- sd-journal: properly handle inotify queue overflow (#1540538)
- sd-journal: make sure it's safe to call sd_journal_process() before the first sd_journal_wait() (#1540538)
- journalctl: Periodically call sd_journal_process in journalctl (#1540538)
- sd-journal: when picking up a new file, compare inode/device info with previous open file by same name (#1540538)</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 219-57.1" date="1529928000">- umount: always use MNT_FORCE in umount_all() (#7213) (#1571098)
- core: Implement timeout based umount/remount limit (#1571098)
- core: Implement sync_with_progress() (#1571098)</changelog>
</package>
<package pkgid="06e8affaeeeee79a5aced4ed17ea29d9b8ded2517c8778b0ae3cea9563eb847f" name="systemtap" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="5184fa016592961e256083e796ae030eae970f8ad72e33aea217e38362e76688" name="systemtap" arch="src">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="66ce2b0fdeb5519522506a833fd2c70ad645d4bc0496a66e6a57bcbb9b0ed900" name="systemtap-client" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="70d22aeb4aba31a35efeed5519db1b5352f629d1fc6d43a80c364b96113897e9" name="systemtap-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="8b83ee3f9f9421c1cba628084d4e2bf50784f7d2eda0c887bf8048532e096919" name="systemtap-devel" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="10536d995e98f92fa1a5ec8e5695e2518876d96dc39a7852d3b047bdf7ccd08e" name="systemtap-initscript" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="e51d94c10517573a423c16f029ea462730f76ba578fa16c18009f54005e76500" name="systemtap-runtime" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="71cf1639f9d4e5a6b25e364db21451c090db118227a79c0e5a6206aacac47b8a" name="systemtap-runtime-java" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="e702eec1d94ad8b91a93de4c72ff2114ce4512b99d5c4db437d7f90779dd5b86" name="systemtap-runtime-python2" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="abebe74428c2e2aaf2b5bc1bd5dee736409fbbcd0caffc5c92f9588fb2823ea7" name="systemtap-runtime-virtguest" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="d5441908dc98a2b54c67f296a470d045278759feeaaa22eebf80bcfbe5479646" name="systemtap-sdt-devel" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="b4a10994a30961f32b2ed689ec6716349f1522a5a94a378224d9bfc66f341b48" name="systemtap-server" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="ab4ef4aa608800613d4ca35adffbe000f2607164cb523fba6b16e990ce1ac51c" name="systemtap-testsuite" arch="ppc64le">
  <version epoch="0" ver="3.2" rel="8.el7_5"/>
  <changelog author="Stan Cox &lt;scox@redhat.com&gt; - 3.1-2" date="1489579200">- rebuilt</changelog>
  <changelog author="David Smith &lt;dsmith@redhat.com&gt; - 3.1-3" date="1490875200">- Added patches for:
- rhbz1425568 task_dentry_path() fix
- rhbz1431263 arm64 hardware breakpoint crash fix
- rhbz1430828 replace task_exe_file() with current_exe_file()
- rhbz1436845 adapt stapdyn to the dyninst 9.3.1 library search model
- rhbz1433391 workaround parser issue in nfs_proc.stp
- rhbz1428120 update lookup_bad_addr()</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-1" date="1508328000">- Upstream release.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-2" date="1508500800">- rhbz1504009 (dtrace -G -o /dev/null)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-3" date="1511870400">- rhbz1506230 (netif_receive_skb_internal probing)
- rhbz1490862 (f2fs tracepoint header workarounds)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-4" date="1517227200">- rhbz1527809 (staprun detach with SIGQUIT)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-5" date="1524571200">- rhbz1558350 (nfsd.proc.create typo fix)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-6" date="1524571201">- rhbz1567356 (backtraces broken w/ kaslr)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-7" date="1524571202">- rhbz1566422 (module build-id checking broken on unload)</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 3.2-8" date="1524571203">- rhbz1563052 (stp_deref string truncation off-by-one error)</changelog>
</package>
<package pkgid="e3730896ceef99545c0d0073f585bdde983d8ccfc24dbef830683722d1a77b85" name="targetcli" arch="noarch">
  <version epoch="0" ver="2.1.fb46" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-1" date="1412856000">- New upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-2" date="1415102400">- add fix-session-detail.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102401">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
</package>
<package pkgid="ced17fe84329434d47ab57ae46761eb01b98a13c1d0abca36006403dc9afa5cc" name="targetcli" arch="src">
  <version epoch="0" ver="2.1.fb46" rel="4.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-1" date="1412856000">- New upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-2" date="1415102400">- add fix-session-detail.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102401">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
</package>
<package pkgid="582a872d84b2d4f7712c2c0453fbdd8c814e1568349c74174e22ab88d2646b1b" name="targetcli" arch="noarch">
  <version epoch="0" ver="2.1.fb46" rel="6.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102400">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-5" date="1528113600">- saveconfig: way for block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-6" date="1528891200">- handle backups with block-level delete</changelog>
</package>
<package pkgid="bc1c3b72ad326769e7c228bf7371f793954ed9643b3d928a1e6b5db9ffd8f4cb" name="targetcli" arch="src">
  <version epoch="0" ver="2.1.fb46" rel="6.el7_5"/>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb37-3" date="1415102400">- add tpg-invalid-tag.patch
- add default-portal-pref.patch</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-1" date="1436961600">- Update to latest in Fedora
- Remove patches as fixes are in upstream version</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-2" date="1436961601">- add no-userbackstores.patch to not show, since not supported on RHEL</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb41-3" date="1439899200">- add no-model-alias.patch, LIO no longer supports for pscsi</changelog>
  <changelog author="Andy Grover &lt;agrover@redhat.com&gt; - 2.1.fb46-1" date="1488456000">- New upstream version
- Drop no-model-alias.patch
- Drop no-userbackstores.patch</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-2" date="1523448000">- Add saveconfig command to StorageObject level</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-3" date="1523620800">- Support tcmu hw max sectors
- create: add a way to set control string</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-4" date="1524484800">- Properly detect errors when writing backup files. (Closes: #80) (#81)
- Read number of backup files to keep from file
- config: defend on '/etc/target/backup' directory
- config: backup when current config is different from recent backup copy
- config: rename key 'kept_backups' as 'max_backup_files'
- backup: global option to tune max no. of backup conf files</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-5" date="1528113600">- saveconfig: way for block-level save with delete command</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 2.1.fb46-6" date="1528891200">- handle backups with block-level delete</changelog>
</package>
<package pkgid="5e6248aff49e9926719637ec027c34d7b6f3cedf0247e8f94394b02423ed2b27" name="thunderbird" arch="ppc64le">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="72336704">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="3d1f65db3a374a693bbba5c818e896114ec85358a3df7c7f3d5c975e5ae435e9" name="thunderbird" arch="ppc64le">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="a76e57699a15798ef80d12743b997d8a11ac432bd4a2a1aa1463aff7b07c4e55" name="thunderbird" arch="src">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="72336704">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="0cd8bef329706dad48dd478c116939bd45845888904140305ab3c217be125451" name="thunderbird" arch="src">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="598831699ce219eddbc0deeb2f65f82870473f2d64e940af1d7339869e31cdee" name="thunderbird" arch="ppc64le">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="35d63fa53f3f9076d417e0d853f5720eecdb655aa22e6b58f0410069b4d8a35d" name="thunderbird" arch="src">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="769883195acd05013ed7bae366902845f8ce025c1412600e15d99e39a8b27e83" name="thunderbird-debuginfo" arch="ppc64le">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="72336704">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="23a705425fbd7e11a13e19cb42fda3fb7bf16f79ebf57395d364548a9892ec44" name="thunderbird-debuginfo" arch="ppc64le">
  <version epoch="0" ver="52.8.0" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.0-1" date="1497528000">- Update to 52.2.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-1" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt;  - 52.8.0-1" date="1527163200">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="cc3c993ba1470f87473be66ede8ddf7f0a6a4209595c162b7729dd3fb25b3d08" name="thunderbird-debuginfo" arch="ppc64le">
  <version epoch="0" ver="52.9.1" rel="1.el7.centos"/>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.2.1-1" date="1498737600">- Update to 52.2.1</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.3.0-1" date="1503316800">- Update to 52.3.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.4.0-2" date="1507118400">- Update to 52.4.0 (b2)</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.0-1" date="1511784000">- Update to 52.5.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.5.2-1" date="1514894400">- Update to 52.5.2</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.6.0-1" date="1516968000">- Update to 52.6.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.7.0-1" date="1522065600">- Update to 52.7.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.8.0-2" date="1526558400">- Update to 52.8.0</changelog>
  <changelog author="Jan Horak &lt;jhorak@redhat.com&gt; - 52.9.1-1" date="1531224000">- Update to 52.9.1</changelog>
  <changelog author="Johnny Hughes &lt;johnny@centos.org&gt; - 52.9.1-1" date="1532433600">- Manual CentOS Debranding</changelog>
</package>
<package pkgid="c21a330f9e35bece9705c23847be24411287ab6b5909b04939f0aea736383990" name="tkinter" arch="ppc64le">
  <version epoch="0" ver="2.7.5" rel="69.el7_5"/>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-60" date="1507032000">- Fix fcntl() with integer argument on 64-bit big-endian platforms.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-61" date="1507032001">- Increase imaplib's MAXLINE to accommodate modern mailbox sizes.
Resolves: rhbz#1489858</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-62" date="1507723200">- Add context parameter to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 2.7.5-63" date="1507896000">- Make it more likely for the system allocator to release free()d memory arenas
Resolves: rhbz#1468410</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-64" date="1508241600">- Fix an issue with the context parameter addition to xmlrpclib.ServerProxy
Resolves: rhbz#1490392</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-65" date="1512734400">- Fix hanging of all threads when trying to access an inaccessible NFS server.
Resolves: rhbz#1520068</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-66" date="1518177600">- Fix https connections behind a proxy.
Resolves: rhbz#1483438</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-67" date="1519041600">- Re-add the private `_set_hostport` api to httplib (Patch 296)
Resolves: rhbz#1546351</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 2.7.5-68" date="1519041601">- Add Conflicts tag with old virtualenv versions due to new behaviour of
  httplib (patch 295)
Resolves: rhbz#1483438</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.7.5-70" date="1527681600">- Remove 3DS cipher to mitigate CVE-2016-2183 (sweet32).
Resolves: rhbz#1584545</changelog>
</package>
<package pkgid="db0165225e604046dd6c1d178bb3da1b6a083cd7c5176e572b8744e5f2530a6d" name="tomcatjss" arch="noarch">
  <version epoch="0" ver="7.2.1" rel="7.el7_5"/>
  <changelog author="Christina Fu &lt;cfu@redhat.com&gt; 7.1.2-3" date="1467201600">- Bugzilla Bug #1203407 - missing ciphers (cfu)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.0-1" date="1489320000">- tomcatjss Pagure Issue #6 - Rebase tomcatjss to 7.2.0 in Fedora 25+ (mharmsen)
- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.0 in RHEL 7.4 (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.0-2" date="1489406400">- Changed build so that it did not package and depend upon the specfile being
  included inside the tarball</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-1" date="1489492800">- Updated jss build and runtime dependencies
- Bumped version due to corrupted tarball</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 7.2.1-2" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 7.2.1-3" date="1490616000">- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.x in RHEL 7.4 (mharmsen)
- ## 'tomcatjss-support-for-event-API.patch' resolves the following issues
  - tomcatjss Pagure Issue #4 - Support for Event API (edewata)</changelog>
  <changelog author="Endi Sukma Dewata &lt;edewata@redhat.com&gt; 7.2.1-4" date="1496664000">- Bugzilla Bug #1457524 - Problem parsing formatted cipher list (edewata)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-5" date="1497268800">- Bugzilla Bug #1460037 - Comply with ASF trademark rules (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-6" date="1497268801">- Bugzilla Bug #1460040 - Comply with ASF trademark rules (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-7" date="1530532800">- Updated jss build and runtime dependencies
- Bugzilla Bug #1597180 - Tomcatjss: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="06576f33fff29d272a0435766b9ca46854599e343c15c5bf5b9273eb96ec4cc3" name="tomcatjss" arch="src">
  <version epoch="0" ver="7.2.1" rel="7.el7_5"/>
  <changelog author="Christina Fu &lt;cfu@redhat.com&gt; 7.1.2-3" date="1467201600">- Bugzilla Bug #1203407 - missing ciphers (cfu)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.0-1" date="1489320000">- tomcatjss Pagure Issue #6 - Rebase tomcatjss to 7.2.0 in Fedora 25+ (mharmsen)
- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.0 in RHEL 7.4 (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.0-2" date="1489406400">- Changed build so that it did not package and depend upon the specfile being
  included inside the tarball</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-1" date="1489492800">- Updated jss build and runtime dependencies
- Bumped version due to corrupted tarball</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 7.2.1-2" date="1490097600">- Added Conflicts statement due to incompatibility with pki-base &lt; 10.4.0</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; - 7.2.1-3" date="1490616000">- Bugzilla Bug #1394416 - Rebase tomcatjss to 7.2.x in RHEL 7.4 (mharmsen)
- ## 'tomcatjss-support-for-event-API.patch' resolves the following issues
  - tomcatjss Pagure Issue #4 - Support for Event API (edewata)</changelog>
  <changelog author="Endi Sukma Dewata &lt;edewata@redhat.com&gt; 7.2.1-4" date="1496664000">- Bugzilla Bug #1457524 - Problem parsing formatted cipher list (edewata)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-5" date="1497268800">- Bugzilla Bug #1460037 - Comply with ASF trademark rules (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-6" date="1497268801">- Bugzilla Bug #1460040 - Comply with ASF trademark rules (mharmsen)</changelog>
  <changelog author="Matthew Harmsen &lt;mharmsen@redhat.com&gt; 7.2.1-7" date="1530532800">- Updated jss build and runtime dependencies
- Bugzilla Bug #1597180 - Tomcatjss: Add support for TLS_*_SHA384 ciphers
  [rhel-7.5.z] (cfu)</changelog>
</package>
<package pkgid="be678df3ab0a375f2f53c9796215d0eb5f23a55590b07abf7d87025470999102" name="tuned" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="60f04cb5e8928676e6f6b7b814ef280d2207c2e120cd5823f3ae87414fc6551f" name="tuned" arch="src">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="b188d035745848fe42c325b990a7e1b6ee88ed44661d36b7826b884a3253110b" name="tuned-gtk" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="6f8417f5d19b4ed3b0576d3940ee5a2ec36da8b4a038a2e07b6204a491805556" name="tuned-profiles-atomic" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="82078c6450aadfc3fe5c220015b8f1faeb58e81c0878022ebe6c444443a2ec45" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="830f23799b7f056ad95f65cae39fad6f7a17fc08df9a15592c1faa6d59a33dcc" name="tuned-profiles-cpu-partitioning" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="b3f481851ab7b8e8dab4137fcd84a1ac87029c163910ddaef19040686fea5927" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="0b4e7a539d2ea72a1718810b8cc4b7a627e6ee1e617410d45b8a8a2e9e8160ea" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="a13256b3fd01fe3f5bcd489bb27b0af7b3e94737530128f988adf89b1f429b10" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="b9170812edd296d200688f82d921cc589d40569cbe046d541fafb63040dfe43e" name="tuned-profiles-oracle" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="6d9f5fba8937ce573c1315959aad5d4c89e7e0439ffb2fe98b44cfb207aeb0e6" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="3f66b9bb9efa91ea2d271d1bcc561319aed89f914415408dc0e1a6a6f4c2be5b" name="tuned-profiles-sap" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="37089c46cfb4194a24201b67675e3b9e3f1ace5904be46e51118f8dc850c2df8" name="tuned-profiles-sap-hana" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="73984cd4d832bd1c7cef1a40d4bfc736c2eb997aa2969381a264af96346bd46b" name="tuned-utils" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="576ff1810e9895dfc228597d70d64dc71d74a43c8c48e49f259cf7db0be3c553" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.9.0" rel="1.el7"/>
  <changelog author="Ond&#x159;ej Lyson&#x11B;k &lt;olysonek@redhat.com&gt; - 2.7.1-3" date="1473681600">- Fixed a traceback
  resolves: rhbz#1372298</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.7.1-4" date="1478606400">- Fixed timeout if non-existent profile is requested
  resolves: rhbz#1369502</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-1" date="1491566400">- new release
  - rebase tuned to latest upstream
    resolves: rhbz#1388454
  - cpu-partitioning: enabled timer migration
    resolves: rhbz#1408308
  - cpu-partitioning: disabled kvmclock sync and ple
    resolves: rhbz#1395855
  - spec: muted error if there is no selinux support
    resolves: rhbz#1404214
  - units: implemented instance priority
    resolves: rhbz#1246172
  - bootloader: added support for initrd overlays
    resolves: rhbz#1414098
  - cpu-partitioning: set CPUAffinity early in initrd image
    resolves: rhbz#1394965
  - cpu-partitioning: set workqueue affinity early
    resolves: rhbz#1395899
  - scsi_host: fixed probing of ALPM, missing ALPM logged as info
    resolves: rhbz#1416712
  - added new profile cpu-partitioning
    resolves: rhbz#1359956
  - bootloader: improved inheritance
    resolves: rhbz#1274464
  - units: mplemented udev-based regexp device matching
    resolves: rhbz#1251240
  - units: introduced pre_script, post_script
    resolves: rhbz#1246176
  - realtime-virtual-host: accommodate new ktimersoftd thread
    resolves: rhbz#1332563
  - defirqaffinity: fixed traceback due to syntax error
    resolves: rhbz#1369791
  - variables: support inheritance of variables
    resolves: rhbz#1433496
  - scheduler: added support for cores isolation
    resolves: rhbz#1403309
  - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
    resolves: rhbz#1413111
  - desktop: fixed typo in profile summary
    resolves: rhbz#1421238
  - with systemd don't do full rollback on shutdown / reboot
    resolves: rhbz#1421286
  - builtin functions: added virt_check function and support to include
    resolves: rhbz#1426654
  - cpulist_present: explicitly sorted present CPUs
    resolves: rhbz#1432240
  - plugin_scheduler: fixed initialization
    resolves: rhbz#1433496
  - log errors when applying a profile fails
    resolves: rhbz#1434360</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-2" date="1492084800">- respin
  related: rhbz#1388454
- systemd: added support for older systemd CPUAffinity syntax
  resolves: rhbz#1441791
- scheduler: added workarounds for low level exceptions from
  python-linux-procfs
  resolves: rhbz#1441792
- bootloader: workaround for adding tuned_initrd to new kernels on restart
  resolves: rhbz#1441797
- cpu-partitioning: use tuna for cores isolation
  related: rhbz#1403309</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-3" date="1493985600">- added workaround for old pyudev
  related: rhbz#1251240</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-4" date="1496750400">- added skew_tick=1 to realtime and simplified bootcmdline inheritance
  resolves: rhbz#1447938</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.8.0-5" date="1497268800">- realtime: re-assigned kernel thread priorities
  resolves: rhbz#1452357</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.1.rc1" date="1507809600">- new release
  - rebased tuned to latest upstream
    resolves: rhbz#1467576
  - added recommend.d functionality
    resolves: rhbz#1459146
  - recommend: added support for matching of processes
    resolves: rhbz#1461838
  - cpu-partitioning: used tuned instead of tuna for cores isolation
    resolves: rhbz#1442229
  - bootloader: splitted string for removal from cmdline
    resolves: rhbz#1461279
  - network-latency: added skew_tick=1 kernel command line parameter
    resolves: rhbz#1451073
  - bootloader: accepted only certain values for initrd_remove_dir
    resolves: rhbz#1455161
  - increased udev monitor buffer size, made it configurable
    resolves: rhbz#1442306
  - bootloader: don't add nonexistent overlay image to grub.cfg
    resolves: rhbz#1454340
  - plugin_cpu: don't log error in execute() if EPB is not supported
    resolves: rhbz#1443182
  - sap-hana: fixed description of the sap-hana profiles
    resolves: rhbz#1482005
  - plugin_systemd: on full_rollback notify about need of initrd regeneration
    resolves: rhbz#1469258
  - don't log errors about missing files on verify with ignore_missing set
    resolves: rhbz#1451435
  - plugin_scheduler: improved logging
    resolves: rhbz#1474961
  - improved checking if we are rebooting or not
    resolves: rhbz#1475571
  - started dbus exports after a profile is applied
    resolves: rhbz#1443142
  - sap-hana: changed force_latency to 70
    resolves: rhbz#1501252
  - plugin_video: added support for the 'dpm' power method
  - list available profiles on 'tuned-adm profile'</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-0.2.rc2" date="1508500800">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576
  - fixed expansion of the variables in the 'devices' section
    related: rhbz#1490399
  - cpu-partitioning: add no_rebalance_cores= option
    resolves: rhbz#1497182</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.9.0-1" date="1509278400">- new release
  - rebased tuned to latest upstream
    related: rhbz#1467576</changelog>
</package>
<package pkgid="e60569d3127d756cb07aa3723aafe3db856cdfefd530c12eb290c4e801b77cbd" name="util-linux" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="0d550f48044dc0a648914ea4987c8ae233634bf9603593a5a9bad10549e8fcfa" name="util-linux" arch="src">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="b3da8f6be0549e7f4266183a2a436463ceac70940bbd8b6c17980c6b6edf14c1" name="util-linux-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="448dc7b782b88896d97fa5e7c18a88cd66fe66999a20406fbfd1b8ed61150f11" name="uuidd" arch="ppc64le">
  <version epoch="0" ver="2.23.2" rel="52.el7_5.1"/>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-44" date="1508155200">- fix #1478002 - systemd read-only container produces errors
- fix #1499760 - gvfs-udisks2-volume-monitor generates huge amount of audit log with access denied messages
- fix #1498462 - agetty not parsing /etc/os-release correctly when processing /etc/issue
- fix #1490984 - Please update fdisk's manual page
- fix #1487031 - [GSS][RFE]The Ceph disk type is unknown then we run the command "fdisk -l"
- fix #1468646 - lscpu output missing Hypervisor
- fix #1455398 - flock --timeout=0 doesn't work on RHEL7
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1427500 - util-linux: script does not retry on EINTR when logging command output
- fix #1336432 - journald: SYSLOG_IDENTIFIER is invalid when running logger
- fix #1296233 - login(1) writes 0.0.0.0 IP address to wtmp when executed with "-h &lt;ipv4-mapping-to-ipv6&gt;" hostname</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-45" date="1508241600">- fix #1501953 - blkid shows wrong return code on failure with ambivalent results
- fix #1486777 - wipefs printing duplicate gpt clear messages
- fix #1454652 - fix test suite</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-46" date="1508760000">- fix #1496421 - Move lsmem and chmem to util-linux</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-47" date="1510142400">- improve lsmem (#1496421)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-48" date="1510228800">- improve libmount eaccess test (#1499760)</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-49" date="1512993600">- fix #1520906 - make hostname in login(1) prompt optional
- fix #1521163 - [RFE] blkid can identify magic number and UUID of VDO volume</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-50" date="1516708800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-51" date="1517400000">- fix #1538545 - SELinux error creating swap file</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52" date="1517572800">- fix #1534893 - RHEL7: util-linux: mount/unmount ASLR bypass via environment variable in libmount</changelog>
  <changelog author="Karel Zak &lt;kzak@redhat.com&gt; 2.23.2-52.el7_5.1" date="1531396800">- fix #1594681 - blkid does not output swap area</changelog>
</package>
<package pkgid="faa4f0356fc563139304a071e1dea2a58cfb402267d13db19498de740e07cb27" name="virt-dib" arch="ppc64le">
  <version epoch="1" ver="1.36.10" rel="6.el7_5.2"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:1.32.7-3" date="1472558400">- Rebase to libguestfs 1.32 in RHEL 7.3
  resolves: rhbz#1218766
- The full tests are now run after the package has been built.
- New tool and subpackage: virt-dib (safe diskimage-builder replacement).
- New subpackage libguestfs-inspect-icons to reduce dependencies of main pkg
  (see https://bugzilla.redhat.com/1194158).
- New tool: virt-get-kernel.
- Depend on java-headless instead of full java.
- New tool: virt-v2v-copy-to-local.
- Disable virt-v2v subpackage on ppc64 etc
  resolves: rhbz#1287826
- v2v: Remove VirtualBox Additions correctly
  resolves: rhbz#1296606
- Add clearer warnings sections to all man pages
  resolves: rhbz#1293527
- v2v: Disable the --in-place option.
- v2v: Support conversion of Windows &gt; 7
  resolves: rhbz#1190669
- Add code to verify tarball signatures.
- General performance improvements.
- v2v: Prevent duplicate -b, -n, -oa options
  resolves: rhbz#1326266
  resolves: rhbz#1325825
- v2v: Unquote UUID and LABEL in fstab (util-linux 1335671)
- v2v: Fix alignment issues in treeviews in conversion dialog
  resolves: rhbz#1340407
- p2v: spinner should be hidden when it stops spinning
  resolves: rhbz#1341564
- p2v: ethtool command is not supported on p2v client
  resolves: rhbz#1341608
- p2v: Add ifconfig command to ISO
  resolves: rhbz#1342447
- p2v: Warn if virt-p2v-make-disk used on a partition
  resolves: rhbz#1342337
- Build using OCaml with fix for CVE-2015-8869.
  resolves: rhbz#1343101
- customize: Add --uninstall option (upstream 1343375)
- p2v: Document permissions on id_rsa file
  resolves: rhbz#1343414
- p2v: Print full curl error message
  resolves: rhbz#1343423
- get-kernel: Fix --format auto
  resolves: rhbz#1341984
- v2v: Provide better &lt;Origin/&gt; information to RHEV-M
  resolves: rhbz#1342398
- customize: Give an error if --truncate-recursive path does not exist
  resolves: rhbz#1345809
- sysprep: Add --network option so that --install option can be used
  resolves: rhbz#1345813
- p2v: Print proper error if incorrect password is given
  resolves: rhbz#1227599
- p2v: Print ssh error if incorrect hostname is given
  resolves: rhbz#1167916
- p2v: Display progress of operation in non-GUI mode
  resolves: rhbz#1229386
- p2v: Add a dialog confirming the user really means to cancel
  resolves: rhbz#1340464
- p2v: log window should process colour escapes and backspaces
  resolves: rhbz#1314244
- v2v: Fix installation of virtio drivers with *.dll files
  resolves: rhbz#1311373
- p2v: Improve error message when ssh login to conversion server fails
  resolves: rhbz#1348900
- v2v: Remove --dcpath parameter from manual
  resolves: rhbz#1315237
- v2v: Fix conversion of guests with floppy drives
  resolves: rhbz#1309706
- p2v: Better error when sudo requires a password
  resolves: rhbz#1340809
- v2v: Refuse to convert if there is &lt; 1GB free in temporary directory
  resolves: rhbz#1316479
- inspection: Get Windows drive letters for GPT disks
  resolves: rhbz#1349237
- p2v: Add disk utils and display serial number of disks
  resolves: rhbz#855058
- p2v: Fix timeout error when connecting to unresponsive ssh server
  resolves: rhbz#1350363
- Remove external dependency generator.  Use supermin RPM deps instead.
  related: rhbz#1309796
- p2v: Flush messages to the journal immediately
  resolves: rhbz#1229386
- customize: Fix --install on ppc64le
  resolves: rhbz#1264835
- lib: Fix finding icons in Windows 7 64 bit guests
  resolevs: rhbz#1352761
- v2v: Add virsh --quiet flag when running virt-v2v --quiet
  resolves: rhbz#1358142
- lib: Fix inspection of ISOs with latest libosinfo
  resolves: rhbz#1359652
- dib: Fix run_command exit handlers on failure
  resolves: rhbz#1362357
- dib: Rework run of extra-data.d hooks
  resolves: rhbz#1362354
- Miscellaneous fixes to man pages and --help output
  resolves: rhbz#1362668
- lib: Specify backing format for read-only files
  resolves: rhbz#1354335
- Fix --selinux-relabel option
  resolves: rhbz#1362669
- sparsify: Fix --in-place option with UEFI guest
  resolves: rhbz#1364347
- p2v: Use latest linux-firmware in ISO
  resolves: rhbz#1364419
- v2v: Fix guest name when using -i disk
  resolves: rhbz#1365005
- p2v: Fix GUI message.
- v2v: Make fstrim message clearer
  resolves: rhbz#1366456
- v2v: Fix conversion of UEFI guests when Secure Boot OVMF installed
  resolves: rhbz#1367615
- lib: Fix assert-fail if port is missing in libvirt XML
  resolves: rhbz#1370424</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.3-6" date="1498132800">- Rebase to libguestfs 1.36 in RHEL 7.4.
  resolves: rhbz#1359086
- v2v: always use names for libvirt pools
  resolves: rhbz#1141631
- v2v: correctly find GRUB in RHEL UEFI guests
- v2v: uninstall VMware tools packages from guests
  resolves: rhbz#1155150
- v2v: install RHEV-APT only when using -o rhev/-o vdsm
  resolves: rhbz#1161019
- New API: btrfs-filesystem-show
  resolves: rhbz#1164765
- p2v: always enable debugging when running virt-v2v
  resolves: rhbz#1167623
- libguestfs prefers virtio-pci on aarch64
  resolves: rhbz#1237250
- v2v: make sure to copy all the driver files on Windows
  resolves: rhbz#1255610
- Better tolerate corrupted Windows hivex; bump the hivex BuildRequires and
  Requires to &gt;= 1.3.10-5.8.el7
  resolves: rhbz#1311890
- v2v: ignore all the environment variables for proxy when exporting from
  vCenter
  resolves: rhbz#1354507
- virt-sysprep can deal with full-LUKS encrypted guests
  resolves: rhbz#1362649
- All the tools have bash completion scripts.
  resolves: rhbz#1367738
- v2v: do not remove Processor and Intelppm nodes in Windows guests
  resolves: rhbz#1372668
- Fix SELinux relabelling in old RHEL 6 guests, by adjusting a broken
  regular expression in file_contexts file
  resolves: rhbz#1374232
- v2v: set all the properties on creation when exporting to Glance
  resolves: rhbz#1374405
- v2v: set hw_video_model when exporting to Glance
  resolves: rhbz#1374651
- v2v: fix OVA conversion as root using the libvirt backend
  resolves: rhbz#1375157
- Various improvements and fixes to the documentation
  resolves: rhbz#1377081
  resolves: rhbz#1390876
  resolves: rhbz#1398070
  resolves: rhbz#1425306
- v2v: support &lt;listen type='socket'&gt; and &lt;listen type='none'&gt;
  resolves: rhbz#1378022
- v2v: allow libvirt &gt;= 2.1.0 for vCenter conversions
  resolves: rhbz#1379240
- p2v: enable mnemonics in the GUI
  resolves: rhbz#1379289
- Split virt-p2v, and the tools for it, in an own package: virt-p2v-maker
  resolves: rhbz#1382275
- Correctly parse mount options in btrfs entries in /etc/fstab.
  resolves: rhbz#1383517
- Read secrets from libvirt domains, when inspecting them
  resolves: rhbz#1392798
- v2v: add --vdsm-compat=1.1 flag for VDSM
  resolves: rhbz#1400205
- Fix inspection with UsrMove and /usr in a separate partition
  resolves: rhbz#1401474
- v2v: improve import compatibility with OVAs produced by AWS
  resolves: rhbz#1402301
- resize: allow URIs for the output disk
  resolves: rhbz#1404182
- Disable EDD when launching the appliance
  resolves: rhbz#1404287
- v2v: increase the memory allocated to the appliance
  resolves: rhbz#1418283
- p2v: switch from GTK+ 2 to GTK+ 3
- p2v: add dbus-devel as BuildRequires to disable suspension during the
  conversion
- libguestfs-java: bump the java-headless Require to &gt;= 1.7.0, matching the
  Build-Require, and the generated bytecode
  resolves: rhbz#1364518
- Do not try to use/write to /var/cache/yum &amp; /var/log/yum.log
- Bump ocaml-findlib-devel BuildRequires to &gt;= 1.3.3-7.el7, because of
  RHBZ#1403897
- v2v: remove --dcpath &amp; --dcPath from --help output too
  resolves: rhbz#1429430
- v2v: force VNC as display for -i disk, as SDL is not supported
  resolves: rhbz#1372671
- v2v, p2v: rename rhvm network to ovirtmgmt
  resolves: rhbz#1429491
- v2v: when exporting to local disk, check that UEFI firmware is installed
  before conversion
  resolves: rhbz#1429506
- dib: actually generate SHA256 checksums when using --checksum
  resolves: rhbz#1430184
- v2v: do not mention SUSE Xen hosts as supported
  resolves: rhbz#1430203
- v2v: depend on OVMF/AAVMF, for converting EFI guests
  resolves: rhbz#1429643
- v2v: use absolute path when using an OVA as backing file
  resolves: rhbz#1430680
- v2v: support Debian/Ubuntu guests
  resolves: rhbz#1387213
- sysprep: remove DHCP_HOSTNAME entries
  resolves: rhbz#1427529
- v2v: avoid repeated "run virt-v2v -v -x" message on error
  resolves: rhbz#1167623
- bash-completion: add script for virt-v2v-copy-to-local
  resolves: rhbz#1367738
- v2v: fix virtio block driver installation for Windows 10 and Windows 2016
  resolves: rhbz#1434737
- Replace the libosinfo dependency with osinfo-db, since we are only using
  the osinfo database.
- v2v: fix virtio driver installation for Windows 8 UEFI
  resolves: rhbz#1431579
- v2v: new 'vmx' import method
  resolves: rhbz#1441197
- v2v: properly identify Windows 2016 guests when exporting them to RHV-M
  resolves: rhbz#1447202
- Run pvresize in non-interactive mode
  resolves: rhbz#1460692
- resize: make sure the input disk is read-only
  resolves: rhbz#1463714
- Switch qemu-kvm-rhev dependency to qemu-kvm on aarch64
  resolves: rhbz#1463646</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6" date="1516622400">- Rebase to libguestfs 1.36.10 in RHEL 7.5.
  resolves: rhbz#1472272
- Build against OCaml 4.05
  resolves: rhbz#1447981
- Enable the copyonread flag when running the appliance using libvirt.
  resolves: rhbz#1466563
- Make sure kernel-rt is never used as Requires.
  resolves: rhbz#1471651
- v2v: disable unconfiguration of manually installed VMware tools.
  resolves: rhbz#1477905
- v2v: prefer pigz or pxz for uncompressing OVA files, if available
  resolves: rhbz#1448739
- resize: handle empty UUIDs for swap partitions
  resolves: rhbz#1482737
- v2v: remove mention of --dcpath in an error message
  resolves: rhbz#1486197
- Disables the QEMU image file locking when opening disks as read-only
  resolves: rhbz#1417306
  resolves: rhbz#1503497
- Briefly document the format used for URIs
  resolves: rhbz#1450325
- v2v: deal with grub2 configurations without a default set
  resolves: rhbz#1472288
- v2v: warn when a guest has passthrough devices
  resolves: rhbz#1472719
- v2v: fix three regular expressions
  resolves: rhbz#1494555
- v2v: enable conversion of full-disk LUKS-encrypted Linux guests
  resolves: rhbz#1451665
- v2v: new 'vddk' import method
  resolves: rhbz#1477912
  resolves: rhbz#1513884
- Enable libguestfs to work on z Systems
  resolves: rhbz#1479526
- p2v: fx check for sudo requiring a password
  resolves: rhbz#1500673
- v2v: handle disks with snapshots in vCenter
  resolves: rhbz#1172425
- rescue: backport improved version
  resolves: rhbz#1438710
- v2v: improve bootloader detection
  resolves: rhbz#1508299
- v2v: parse MAC address of network interfaces in OVF files
  resolves: rhbz#1506572
- Unconditionally depend on libvirt-daemon-kvm &gt;= 3.9.0-1, which will always
  pull the right qemu-kvm too, and thus remove the unversioned dependencies
  on it
  resolves: rhbz#1500870
- v2v: fix RPM file owned test
  resolves: rhbz#1503958
- Do not open read-only disks using &lt;shareable/&gt; in the libvirt backend
  resolves: rhbz#1518517
- v2v: handle better when grubby does not report any default kernel
  resolves: rhbz#1519204
- v2v: enhance vmx import method to access via SSH
  resolves: rhbz#1523767
- builder: fix caching of templates when using --cache-all-templates
  resolves: rhbz#1523650</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.1" date="1522324800">- Fix SELinux relabelling when the SELinux config has no SELINUXTYPE key
  resolves: rhbz#1558922</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1:1.36.10-6.el7_5.2" date="1524484800">- Fix qemu-img-ma dependency
  resolves: rhbz#1570533</changelog>
</package>
<package pkgid="2e3e82f875c4781347cc196de1f6b2bf41a1932fe689648c183c878eba2d2cc3" name="virt-who" arch="noarch">
  <version epoch="0" ver="0.21.7" rel="1.el7_5"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20-1" date="1497009600">- 1389729: Add missing xml section for test (fran@caosdigital.com)
- 1389729: virt-who incorrectly reports 'name' instead of 'hostname' for RHEV
  hosts (fran@caosdigital.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)
- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)
- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- DestinationThreads now send all reports (csnyder@redhat.com)
- Adds IntervalThread base class and refactors Virt classes
  (csnyder@redhat.com)
- Remove reference to nonexistant method _set_option (csnyder@redhat.com)
- Update ConfigManager to produce destination and source mappings.
  (csnyder@redhat.com)
- Implemements a threadsafe datastore (csnyder@redhat.com)
- Move from using processes to threads (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)
- 1403640: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- Add releaser for rhel-7.4 (khowell@redhat.com)
- 1391512: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.2-1" date="1499947200">- 1458184: better reading of environment variables (jhnidek@redhat.com)
- 1401867: Enable logging of rhsm module to rhsm.log (jhnidek@redhat.com)
- 1404117: Check parameter consistency and refactoring (jhnidek@redhat.com)
- Adds a patch number to virt-who versioning (csnyder@redhat.com)
- 1401420: xen supports only uuid/hostname as hypervisor_id
  (jhnidek@redhat.com)
- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)
- 1452436: virt-who prints host-to-quest mapping everytime (jhnidek@redhat.com)
- 1357761: Do not check passwords to be in latin1 encoding (jhnidek@redhat.com)
- 1457101: Continue running despite malformed configs (csnyder@redhat.com)
- 1409984: Retry initial report retrieval on connection timeout
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.4-1" date="1501070400">- Point Source0 to GitHub (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.0-1" date="1509364800">- Update hypervisorCheckInAsync test for new config sections
  (csnyder@redhat.com)
- Update Config Refactor with changes from master (csnyder@redhat.com)
- Removed usage of old Config (not unit tests) (jhnidek@redhat.com)
- Further clean up of unit tests (jhnidek@redhat.com)
- Create Xen Config Subclass (jhnidek@redhat.com)
- Create Rhevm Config Subclass (jhnidek@redhat.com)
- Create VDSM config subclass (wpoteat@redhat.com)
- Clean up ConfigSection Unit tests (jhnidek@redhat.com)
- Adds FakeVirtConfigSection (csnyder@redhat.com)
- Configuration subclass for hyperv (wpoteat@redhat.com)
- Implement EsxConfigSection (khowell@redhat.com)
- Libvirtd ConfigSection Subclass (jhnidek@redhat.com)
- Adds EffectiveConfig, ConfigSection (csnyder@redhat.com)
- Adds warning message for deprecated env vars (csnyder@redhat.com)
- 1503700: Updates to the job polling frequency (csnyder@redhat.com)
- 1502821: Remove undocumented, broken env var "VIRTWHO_DISABLE_ASYNC"
  (csnyder@redhat.com)
- 1466015: Warn of deprecation of command line options in next release
  (wpoteat@redhat.com)
- remove non-existant variable fake_is_hypervisor (adarshvritant@gmail.com)
- 1485865: Do not replace /etc/virt-who.conf on rpm upgrade
  (csnyder@redhat.com)
- Utilize the owner from the first report seen, if we do not know the owner
  (csnyder@redhat.com)
- Updates based on review (use str.format) (csnyder@redhat.com)
- Fix example fake config in man docs (adarshvritant@gmail.com)
- Add m2crypto dependency (adarshvritant@gmail.com)
- 1211435: Don't send host-to-geust mapping, when env, owner are wrong
  (jhnidek@redhat.com)
- 1408556: Log which owner updated mappings are being sent to
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.21.1-1" date="1511870400">- 1511308: Only ESX supports: exclude_host_parents and filter_host_parents.
  (jhnidek@redhat.com)
- 1509596: Use qemu+ssh transport if not provided (libvirt)
  (csnyder@redhat.com)
- 1511308: Xen and Hyper-V do not support some filter options
  (jhnidek@redhat.com)
- 1510760: Ensure virt-who exits properly (w/ no good conf)
  (csnyder@redhat.com)
- 1509606: Remove duplicate output of validation messages (csnyder@redhat.com)
- 1509597: Fix issue with cli consistancy check for vdsm (csnyder@redhat.com)
- 1509595: Only expect owner on HostGuestAssociationReports
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.2-1" date="1512648000">- 1510310: Ensure that owner and env are required where necessary
  (csnyder@redhat.com)
- 1512778: ESX should require username, password, and server values
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.3-1" date="1515412800">- 1523548: Options log_dir and log_file are not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.4-1" date="1517313600">- 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
- 1509597: Enable to use virt-who with VDSM again (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.5-1" date="1517918400">- 1492074: Enable login to ESX using password with UTF-8 string
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.21.7-1" date="1524657600">- 1569299: try/exception needed for hypervisor_id check (wpoteat@redhat.com)</changelog>
</package>
<package pkgid="f33ef2539f669062bc3d0ce056ace267f97257b9a4ca36f34d5812b8ede15b09" name="virt-who" arch="src">
  <version epoch="0" ver="0.21.7" rel="1.el7_5"/>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20-1" date="1497009600">- 1389729: Add missing xml section for test (fran@caosdigital.com)
- 1389729: virt-who incorrectly reports 'name' instead of 'hostname' for RHEV
  hosts (fran@caosdigital.com)
- 1450747: Continue running destination threads on internal failure
  (csnyder@redhat.com)
- 1444718: Log name of config when duplicate reports are retrieved
  (csnyder@redhat.com)
- 1447264: Keep running on InvalidPasswordFormat given other valid configs
  (csnyder@redhat.com)
- 1448267: Fix polling behavior for oneshot, CTRL-C, 429 responses
  (csnyder@redhat.com)
- 1369107: Update docs and log messages to show the *.conf requirement
  (csnyder@redhat.com)
- 1436517: Fix api base detection for rhevm version 3 and 4
  (csnyder@redhat.com)
- 1442337: Send updates immediately the first run (csnyder@redhat.com)
- Do not join threads not started, fix up fake backend (csnyder@redhat.com)
- 1439317: Ensure reports are still sent despite duplicate configurations
  (csnyder@redhat.com)
- DestinationThreads now send all reports (csnyder@redhat.com)
- Adds IntervalThread base class and refactors Virt classes
  (csnyder@redhat.com)
- Remove reference to nonexistant method _set_option (csnyder@redhat.com)
- Update ConfigManager to produce destination and source mappings.
  (csnyder@redhat.com)
- Implemements a threadsafe datastore (csnyder@redhat.com)
- Move from using processes to threads (csnyder@redhat.com)
- 1436517: Set Version header for version detect (pcreech@redhat.com)
- 1403640: Fix syntax error in exception handling (pcreech@redhat.com)
- Update the spec file for builds on more downstream platforms
  (csnyder@redhat.com)
- Add releaser for rhel-7.4 (khowell@redhat.com)
- 1391512: Handle utf-8 within Xmlrpc transport (pcreech@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.2-1" date="1499947200">- 1458184: better reading of environment variables (jhnidek@redhat.com)
- 1401867: Enable logging of rhsm module to rhsm.log (jhnidek@redhat.com)
- 1404117: Check parameter consistency and refactoring (jhnidek@redhat.com)
- Adds a patch number to virt-who versioning (csnyder@redhat.com)
- 1401420: xen supports only uuid/hostname as hypervisor_id
  (jhnidek@redhat.com)
- 1458674: Update use of result data to match the new async api
  (csnyder@redhat.com)
- 1452436: virt-who prints host-to-quest mapping everytime (jhnidek@redhat.com)
- 1357761: Do not check passwords to be in latin1 encoding (jhnidek@redhat.com)
- 1457101: Continue running despite malformed configs (csnyder@redhat.com)
- 1409984: Retry initial report retrieval on connection timeout
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.20.4-1" date="1501070400">- Point Source0 to GitHub (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.0-1" date="1509364800">- Update hypervisorCheckInAsync test for new config sections
  (csnyder@redhat.com)
- Update Config Refactor with changes from master (csnyder@redhat.com)
- Removed usage of old Config (not unit tests) (jhnidek@redhat.com)
- Further clean up of unit tests (jhnidek@redhat.com)
- Create Xen Config Subclass (jhnidek@redhat.com)
- Create Rhevm Config Subclass (jhnidek@redhat.com)
- Create VDSM config subclass (wpoteat@redhat.com)
- Clean up ConfigSection Unit tests (jhnidek@redhat.com)
- Adds FakeVirtConfigSection (csnyder@redhat.com)
- Configuration subclass for hyperv (wpoteat@redhat.com)
- Implement EsxConfigSection (khowell@redhat.com)
- Libvirtd ConfigSection Subclass (jhnidek@redhat.com)
- Adds EffectiveConfig, ConfigSection (csnyder@redhat.com)
- Adds warning message for deprecated env vars (csnyder@redhat.com)
- 1503700: Updates to the job polling frequency (csnyder@redhat.com)
- 1502821: Remove undocumented, broken env var "VIRTWHO_DISABLE_ASYNC"
  (csnyder@redhat.com)
- 1466015: Warn of deprecation of command line options in next release
  (wpoteat@redhat.com)
- remove non-existant variable fake_is_hypervisor (adarshvritant@gmail.com)
- 1485865: Do not replace /etc/virt-who.conf on rpm upgrade
  (csnyder@redhat.com)
- Utilize the owner from the first report seen, if we do not know the owner
  (csnyder@redhat.com)
- Updates based on review (use str.format) (csnyder@redhat.com)
- Fix example fake config in man docs (adarshvritant@gmail.com)
- Add m2crypto dependency (adarshvritant@gmail.com)
- 1211435: Don't send host-to-geust mapping, when env, owner are wrong
  (jhnidek@redhat.com)
- 1408556: Log which owner updated mappings are being sent to
  (csnyder@redhat.com)</changelog>
  <changelog author="Kevin Howell &lt;khowell@redhat.com&gt; 0.21.1-1" date="1511870400">- 1511308: Only ESX supports: exclude_host_parents and filter_host_parents.
  (jhnidek@redhat.com)
- 1509596: Use qemu+ssh transport if not provided (libvirt)
  (csnyder@redhat.com)
- 1511308: Xen and Hyper-V do not support some filter options
  (jhnidek@redhat.com)
- 1510760: Ensure virt-who exits properly (w/ no good conf)
  (csnyder@redhat.com)
- 1509606: Remove duplicate output of validation messages (csnyder@redhat.com)
- 1509597: Fix issue with cli consistancy check for vdsm (csnyder@redhat.com)
- 1509595: Only expect owner on HostGuestAssociationReports
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.2-1" date="1512648000">- 1510310: Ensure that owner and env are required where necessary
  (csnyder@redhat.com)
- 1512778: ESX should require username, password, and server values
  (csnyder@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.3-1" date="1515412800">- 1523548: Options log_dir and log_file are not ignored (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.4-1" date="1517313600">- 1353119: Add JSON-RPC support for VDSM (khowell@redhat.com)
- 1509597: Enable to use virt-who with VDSM again (jhnidek@redhat.com)</changelog>
  <changelog author="Christopher Snyder &lt;csnyder@redhat.com&gt; 0.21.5-1" date="1517918400">- 1492074: Enable login to ESX using password with UTF-8 string
  (jhnidek@redhat.com)</changelog>
  <changelog author="William Poteat &lt;wpoteat@redhat.com&gt; 0.21.7-1" date="1524657600">- 1569299: try/exception needed for hypervisor_id check (wpoteat@redhat.com)</changelog>
</package>
<package pkgid="0f60aee83e5603657b56e5bbc968648d0848e9d78d4f46d6f6dbc82b0f840019" name="xmlrpc" arch="src">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="fdc26cea6a45aed3ffc3bff36d45f6da5f5c70224a9cc5b1c829f8f2bc18d9d4" name="xmlrpc-client" arch="noarch">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="6bb2e8db2605c4eeaf89d71421e0d82286d1e812f8036acf8729561ff0500b76" name="xmlrpc-common" arch="noarch">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="f65f1061927e7a5b0fbcccb137b517d3d71ba31be8c952b018ada9c4ad5a1032" name="xmlrpc-javadoc" arch="noarch">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="aabce8625a563494e6f962bcd3a9c152a75d3bbd0c5f48d77b13cc631144a7c9" name="xmlrpc-server" arch="noarch">
  <version epoch="1" ver="3.1.3" rel="9.el7_5"/>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1.3-1" date="1347624000">- First release of version 3.x package</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt;&#9;3.1.3-2" date="1350734400">- xmlrpc v2 had an Epoch so we need one here. Add it back</changelog>
  <changelog author="Java SIG &lt;java-devel@lists.fedoraproject.org&gt; - 1:3.1.3-3" date="1360152000">- Update for https://fedoraproject.org/wiki/Fedora_19_Maven_Rebuild
- Replace maven BuildRequires with maven-local</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1:3.1.3-4" date="1360929600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 1:3.1.3-5" date="1368792000">- Remove javax.xml.bind from osgi imports - it's part of the JVM now.
- Drop the ws-jaxme dependency for the same reason.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.3-6" date="1372420800">- Rebuild to regenerate API documentation
- Resolves: CVE-2013-1571</changelog>
  <changelog author="Stanislav Ochotnicky &lt;sochotnicky@redhat.com&gt; - 1:3.1.3-7" date="1376913600">- Migrate away from mvn-rpmbuild (#997460)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1:3.1.3-8" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Michael Simacek &lt;msimacek@redhat.com&gt; - 1:3.1.3-9" date="1527076800">- Disallow deserialization of &lt;ex:serializable&gt; tags by default
- Resolves: CVE-2016-5003</changelog>
</package>
<package pkgid="86dc30f8db4047aa277c60b2d5982c3a1ac7ffb0f3812325abace65ec84b0e35" name="xorg-x11-drv-wacom" arch="ppc64le">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="73e5be4f7f6f85cc3a9eb384f9cece05e71b58795d28ebbf3a7044837f4672a9" name="xorg-x11-drv-wacom" arch="src">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="f7a400eb46489cda170f050857518cf6b83d755162c82d1f144af027f57f8fc2" name="xorg-x11-drv-wacom-debuginfo" arch="ppc64le">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="1bc4ef763c1b06594a7e18020d382503a19906b081f06687627c2db79b583fc2" name="xorg-x11-drv-wacom-devel" arch="ppc64le">
  <version epoch="0" ver="0.34.2" rel="5.el7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.23.0-6" date="1392292800">- Use systemd for starting inputattach on serial devices (#1039445)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.29.0-1" date="1430740800">- wacom 0.29.0 (#1194889)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-1" date="1485518400">- wacom 0.34.0 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-2" date="1487937600">- Don't update properties from within the input thread</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.0-3" date="1488196800">- Cancel timers on DEVICE_OFF to avoid potential invalid memory dereference</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-1" date="1489406400">- wacom 0.34.2 (#1401655)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-2" date="1496318400">- Add Pressure2K option for backwards-compatibility with applications that
  hardcode the previous pressure range (#1457024)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-3" date="1507118400">- Fix hang after unplugging a device (#1496650)
- Correct device flags for some Cintiqs and Intuos pros (#1496659)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-4" date="1510142400">- Add custom .conf snippet for the Dell Canvas 27 touchscreen (#1506538)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.34.2-5" date="1522929600">- Add support for the Pro Pen 3D (#1557255)</changelog>
</package>
<package pkgid="fc3def158bd6a2f54f69e34baac905d04b3380c4e59b8b255e121ca8492bc867" name="yum-NetworkManager-dispatcher" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="311774367ebe7877a27a4e2343ed1c279d84eced8a2a6846d1512120974531af" name="yum-plugin-aliases" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="7f58a6891b8f6f00d3a8cf92c7d60bd896e404b25b70cb24d31d76b37f77723b" name="yum-plugin-auto-update-debug-info" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="6b60c9752fc7bd42b96bffb9e93123abb41cd4d0275248b0c2e4c9a0805e812d" name="yum-plugin-changelog" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="c3b79c878337b498d8292352a00d7bf198f23869cd1e0a8bbb0dee8d7fe4f81b" name="yum-plugin-copr" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="899266e2f272eb403527b9800d0bb8c849c55059f0458b456143bf45e56c5393" name="yum-plugin-fastestmirror" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="0792543e98031ad1040759f151f225a58b51bdb8145d3657276d1de5a891c269" name="yum-plugin-filter-data" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="1529da5d7311de195008f621dd706acf93f9af5ef8e89d4e488ba24a229c8de6" name="yum-plugin-fs-snapshot" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="ada11cd983c53c8be7a992b3d3092f70512ae865d100d897ef5c55e8325404ac" name="yum-plugin-keys" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="4ce96992deac2b9fecd04bfce2ce6143ed5e7129553e49b4bba4770c385412f1" name="yum-plugin-list-data" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="73f7b13764be7188e1bec45b1c8a948338518419f8e285021f48639273e7536a" name="yum-plugin-local" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="75b1bf6837704deb39302c73045f497a8d624010cd085c81c8e6c1b1f41ed553" name="yum-plugin-merge-conf" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="4764e21b968e840b8409b77faa442423a059cfa940f81cc64fde23a18a131af4" name="yum-plugin-ovl" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="a8b88d34e4a9149c1517a9a348aa6d98b7c84555d6f00a137a27dc3f95eb7d93" name="yum-plugin-post-transaction-actions" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="0fb376f34012134cd39a80102654ab196b9506a00780a8fb813e938b88d7e058" name="yum-plugin-pre-transaction-actions" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="f71a1e17d39972c274b4c5f863f46725b435667962c508c74e6d9387c4fbb965" name="yum-plugin-priorities" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="335faa2778d86edb97c6d51abce6133a498ade1f8cdcd69a6f9d3baa492c1135" name="yum-plugin-protectbase" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="7e67b5c1604870897d5e36dd36339485176ffd146c7f007dbb89b0c5932b35ba" name="yum-plugin-ps" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="a40fbb1c33c56624a3f9312db49123b32df011fd0113c19c1bc01395b35fd69a" name="yum-plugin-remove-with-leaves" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="cc1cb7c2a9ede740a73e6844eff6b28c42bafa8ce5b9f3a15418612f202c7f8f" name="yum-plugin-rpm-warm-cache" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="c0a7c8933013910f87cb07335f41a764a637905ba07ad52e25443a0eb0062a5c" name="yum-plugin-show-leaves" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="94cec5ff2d3f6bfa7ad9feb837b119098f73b0d74e5a5a8a1ebca4d291dfa86d" name="yum-plugin-tmprepo" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="6b5f66bc7d0cd29c3d1587183a697bc21d9552c7785c973d73cada4741ecd335" name="yum-plugin-tsflags" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="2d35ed4ce4f153fb79365795352fd476dffa60d11f508fbedf40e68436f6c312" name="yum-plugin-upgrade-helper" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="32caeaaebc439b55361abee8e4179409f2fec7707cc39ca88a732648c2485d97" name="yum-plugin-verify" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="f6145853d7920960332f95811910b297ff24dd7ecf42feacd01bfaef2cdbdf73" name="yum-plugin-versionlock" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="446d389fc0ee70c0b6851199b81b207bb1a7d8091abcc8e692161509b5393ee0" name="yum-updateonboot" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="f7d2090ce90377a06415250f4272ea0b4304134bbbd40e26243210b28902d9c4" name="yum-utils" arch="noarch">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
<package pkgid="c9f327caca4e67bf0388da2402ca15fd4a280b75efba98413ed28a05a3700deb" name="yum-utils" arch="src">
  <version epoch="0" ver="1.1.31" rel="46.el7_5"/>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-37" date="1466510400">- needs-restarting: add option for reboot hint.
- Resolves: bug#1192946
- needs-restarting: add option to list services.
- Resolves: bug#1335587
- reposync: add --download-metadata to the man page.
- Resolves: bug#1329649
- debuginfo-install: also respect provides when testing for installonly.
- Related: bug#1293707</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-38" date="1467288000">- verifytree: use local comps schema.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-39" date="1469188800">- verifytree: don't fail with versioned docdirs.
- Related: bug#1296282</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-40" date="1470312000">- needs-restarting: rework reboothint logic.
- Related: bug#1192946
- needs-restarting: rebase patch for 1335587.
- Related: bug#1335587</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-41" date="1489060800">- yum-config-manager: only select exact matches from --setopt.
- Resolves: bug#1403015
- yum-plugin-verify: set exit status to 1 in case of problems.
- Resolves: bug#1406891</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-42" date="1490097600">- Add yum-plugin-copr.
- Resolves: bug#1429831</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-43" date="1508500800">- yumdownloader: fix crash on broken srpm metadata.
- Resolves: bug#1458098
- package-cleanup: don't remove required dupes.
- Resolves: bug#1455318
- fastestmirror: move the logic before MD retrieval.
- Resolves: bug#1428210
- yum-debug-dump: improve repo failure handling.
- Resolves: bug#1445751</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-44" date="1509364800">- Add pre-transaction-actions plugin.
- Resolves: bug#1470647
- yum-builddep: add --define option.
- Resolves: bug#1437636
- verifytree: handle no @core group gracefully.
- Resolves: bug#1349433
- verifytree: fix handling of missing comps.
- Resolves: bug#1333353</changelog>
  <changelog author="Valentina Mukhamedzhanova &lt;vmukhame@redhat.com&gt; - 1.1.31-45" date="1511265600">- Fix file globbing in transaction-actions.
- Related: bug#1470647</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.1.31-46" date="1532088000">- reposync: prevent path traversal.
- Resolves: bug#1600617</changelog>
</package>
</otherdata>