<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="43">
<package pkgid="f3a547df6a1b4e3e41c8942d7a44a19669560ec529505a3f5fe5f504d0ad188a" name="apr" arch="ppc64le">
  <version epoch="0" ver="1.4.8" rel="7.el7"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-4" date="1509364800">- Resolves: #1507348 - CVE-2017-12613 apr: Out-of-bounds array
  deref in apr_time_exp*() functions</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-5" date="1553169600">- improve key generation for name-based apr_shm_create() (r1561395, #1656482)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-6" date="1585742400">- use RTLD_DEEPBIND in apr_dso_open() (#1739287)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-7" date="1591876800">- only enable RTLD_DEEPBIND if $APR_DEEPBIND is set in env (#1846353)</changelog>
</package>
<package pkgid="f74732672d0fc507bec6498ee1d56b9746c30cd1acf0bdfc4c9a99c9c467ef4c" name="apr" arch="src">
  <version epoch="0" ver="1.4.8" rel="7.el7"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-4" date="1509364800">- Resolves: #1507348 - CVE-2017-12613 apr: Out-of-bounds array
  deref in apr_time_exp*() functions</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-5" date="1553169600">- improve key generation for name-based apr_shm_create() (r1561395, #1656482)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-6" date="1585742400">- use RTLD_DEEPBIND in apr_dso_open() (#1739287)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-7" date="1591876800">- only enable RTLD_DEEPBIND if $APR_DEEPBIND is set in env (#1846353)</changelog>
</package>
<package pkgid="953948be712a66c514a48b77fa4aaa22803a8dc061bca17d4dbdd9ed0b764a12" name="apr-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.8" rel="7.el7"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-4" date="1509364800">- Resolves: #1507348 - CVE-2017-12613 apr: Out-of-bounds array
  deref in apr_time_exp*() functions</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-5" date="1553169600">- improve key generation for name-based apr_shm_create() (r1561395, #1656482)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-6" date="1585742400">- use RTLD_DEEPBIND in apr_dso_open() (#1739287)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-7" date="1591876800">- only enable RTLD_DEEPBIND if $APR_DEEPBIND is set in env (#1846353)</changelog>
</package>
<package pkgid="9a42528e85a0bab8ee502a7645b062c8bf26e334926f1b05f64412317311ecf5" name="apr-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.8" rel="7.el7"/>
  <changelog author="Jan Kaluza &lt;jkaluza@redhat.com&gt; - 1.4.6-5" date="1355313600">- fix strict-aliasing gcc warning
- remove unused SHA384 and SHA512 code</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.4.6-6" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.6-7" date="1369828800">- update config.* for aarch64 (#925009)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-1" date="1372075200">- update to 1.4.8 (#976972)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-2" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.4.8-3" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Lubo&#x161; Uhliarik &lt;luhliari@redhat.com&gt; - 1.4.8-4" date="1509364800">- Resolves: #1507348 - CVE-2017-12613 apr: Out-of-bounds array
  deref in apr_time_exp*() functions</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-5" date="1553169600">- improve key generation for name-based apr_shm_create() (r1561395, #1656482)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-6" date="1585742400">- use RTLD_DEEPBIND in apr_dso_open() (#1739287)</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 1.4.8-7" date="1591876800">- only enable RTLD_DEEPBIND if $APR_DEEPBIND is set in env (#1846353)</changelog>
</package>
<package pkgid="3bee3ae7396b1fa52b73daccb6c2231825ba8ff5464ea05522c9e032269fd52c" name="augeas" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="10.el7"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-7" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1582236)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-8" date="1542110401">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649287)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-9" date="1545220800">- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653766)
- Anaconda: new lens (RHBZ#1657189)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-10" date="1580904000">- Krb5: support realms that start with numbers; add more pkinit_* options;
  improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1670420)
- Grub: handle '+' in kernel command line options (RHBZ#1758357)</changelog>
</package>
<package pkgid="b5b09918992d43c772c132e4c63527c941aaa4e3e394ae27eba298d6168217ed" name="augeas" arch="src">
  <version epoch="0" ver="1.4.0" rel="10.el7"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-7" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1582236)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-8" date="1542110401">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649287)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-9" date="1545220800">- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653766)
- Anaconda: new lens (RHBZ#1657189)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-10" date="1580904000">- Krb5: support realms that start with numbers; add more pkinit_* options;
  improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1670420)
- Grub: handle '+' in kernel command line options (RHBZ#1758357)</changelog>
</package>
<package pkgid="e3be5f115d24be594c530247792d018c072ddebe21b53ef37f04e408b0cf4480" name="augeas-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="10.el7"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-7" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1582236)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-8" date="1542110401">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649287)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-9" date="1545220800">- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653766)
- Anaconda: new lens (RHBZ#1657189)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-10" date="1580904000">- Krb5: support realms that start with numbers; add more pkinit_* options;
  improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1670420)
- Grub: handle '+' in kernel command line options (RHBZ#1758357)</changelog>
</package>
<package pkgid="fb8a1f89c788fe49821a3f9d47b76f4487217462c1fd01e24d8aa7cb05e582f8" name="augeas-devel" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="10.el7"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-7" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1582236)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-8" date="1542110401">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649287)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-9" date="1545220800">- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653766)
- Anaconda: new lens (RHBZ#1657189)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-10" date="1580904000">- Krb5: support realms that start with numbers; add more pkinit_* options;
  improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1670420)
- Grub: handle '+' in kernel command line options (RHBZ#1758357)</changelog>
</package>
<package pkgid="724d77c5829ef3bffa9190b31e257f5111951111279cfd634108ed7c049d4f9f" name="augeas-libs" arch="ppc64le">
  <version epoch="0" ver="1.4.0" rel="10.el7"/>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-1" date="1434110400">- Rebase to Augeas 1.4.0
- Revert some changes for better compatibility with 1.1.0-17:
  * Dhcpd: keep 1.1.0 behaviour, add Dhcpd_140 for 1.4.0 features
  * Dnsmasq: revert splitting of address/server options
  * Dovecot: restore quotes within values
  * Jaas: revert semicolon and line break changes
  * Slapd: keep 1.1.0 behaviour, add Slapd_140 for 1.4.0 features
  * Sshd: keep 1.1.0 behaviour, add Sshd_140 for 1.4.0 features
  * Syslog: restore tree without protocol for UDP hosts
  * UpdateDB: keep Simplevars to load config by default</changelog>
  <changelog author="Dominic Cleal &lt;dcleal@redhat.com&gt; - 1.4.0-2" date="1438257600">- Rhsm: add to parse subscription-manager config (RHBZ#1141121)</changelog>
  <changelog author="Luigi Toscano &lt;ltoscano@redhat.com&gt; - 1.4.0-3" date="1504008000">Fix sudoers lens: recognize "match_group_by_gid" (RHBZ#1483888)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-4" date="1504526400">- Fix CVE-2017-7555, improper handling of escaped strings (RHBZ#1481546)
- Skip testSaveNoPermission when running as root (RHBZ#1269817)
- Chrony: allow signed numbers (RHBZ#1302017)
- Krb5: support includedir (RHBZ#1406111)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-5" date="1507118400">- Cgconfig: allow fperm &amp; dperm in admin &amp; task (RHBZ#1325741)
- Grub: handle top-level "boot" directive (RHBZ#1484261)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-6" date="1522324800">- Fstab: allow leading whitespaces (RHBZ#1544520)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-7" date="1542110400">- Grub: better handle invalid grub.conf files (RHBZ#1582236)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-8" date="1542110401">- Sudoers: handle "always_query_group_plugin" option (RHBZ#1649287)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-9" date="1545220800">- Add "Provides: bundled(gnulib)" to augeas-libs, as it embeds gnulib
  (RHBZ#1653766)
- Anaconda: new lens (RHBZ#1657189)</changelog>
  <changelog author="Pino Toscano &lt;ptoscano@redhat.com&gt; - 1.4.0-10" date="1580904000">- Krb5: support realms that start with numbers; add more pkinit_* options;
  improve handling of [dbmodules]; allow include/includedir directives
  everywhere (RHBZ#1670420)
- Grub: handle '+' in kernel command line options (RHBZ#1758357)</changelog>
</package>
<package pkgid="283b558f50b3553f094a04cb09a05d4978b4623a4e07d0db6c00f85ac7187d5e" name="bogofilter" arch="ppc64le">
  <version epoch="0" ver="1.2.5" rel="1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.2-3" date="1326369600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.2-4" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.2-5" date="1343304000">- add new libdb4 include path to configure options</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.3-1" date="1354622400">- updated to 1.2.3 (fixes #883358, CVE-2012-5468)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.3-2" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.3-2" date="1361534400">- removed three files with an unfree license from Source (fixes #912694)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.3-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Hor&#xE1;k &lt;hhorak@redhat.com&gt; - 1.2.3-4" date="1389614400">- Build against libdb, not compat libdb4
  Resolves: #1044991</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.3-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.5-1" date="1589544000">- Resolves: #1761248 (Update to 1.2.5)</changelog>
</package>
<package pkgid="77b8ec348475eff9557c9d17b7710a0c8c2a269807856fa6dd9d6127ee4620d1" name="bogofilter" arch="src">
  <version epoch="0" ver="1.2.5" rel="1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.2-3" date="1326369600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.2-4" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.2-5" date="1343304000">- add new libdb4 include path to configure options</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.3-1" date="1354622400">- updated to 1.2.3 (fixes #883358, CVE-2012-5468)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.3-2" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.3-2" date="1361534400">- removed three files with an unfree license from Source (fixes #912694)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.3-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Hor&#xE1;k &lt;hhorak@redhat.com&gt; - 1.2.3-4" date="1389614400">- Build against libdb, not compat libdb4
  Resolves: #1044991</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.3-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.5-1" date="1589544000">- Resolves: #1761248 (Update to 1.2.5)</changelog>
</package>
<package pkgid="9fabe49e88284946557eda7b9de88d28791a2c29432a26f3aebc1a4a1c03dd19" name="bogofilter-bogoupgrade" arch="ppc64le">
  <version epoch="0" ver="1.2.5" rel="1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.2-3" date="1326369600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.2-4" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.2-5" date="1343304000">- add new libdb4 include path to configure options</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.3-1" date="1354622400">- updated to 1.2.3 (fixes #883358, CVE-2012-5468)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.3-2" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.3-2" date="1361534400">- removed three files with an unfree license from Source (fixes #912694)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.3-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Hor&#xE1;k &lt;hhorak@redhat.com&gt; - 1.2.3-4" date="1389614400">- Build against libdb, not compat libdb4
  Resolves: #1044991</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.3-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.5-1" date="1589544000">- Resolves: #1761248 (Update to 1.2.5)</changelog>
</package>
<package pkgid="299f079ff76e6b37c2036cc1df8a9b8f407f609099a336ba196327a588518bb4" name="bogofilter-debuginfo" arch="ppc64le">
  <version epoch="0" ver="1.2.5" rel="1.el7"/>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.2-3" date="1326369600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.2-4" date="1342612800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.2-5" date="1343304000">- add new libdb4 include path to configure options</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.3-1" date="1354622400">- updated to 1.2.3 (fixes #883358, CVE-2012-5468)</changelog>
  <changelog author="Fedora Release Engineering &lt;rel-eng@lists.fedoraproject.org&gt; - 1.2.3-2" date="1360756800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.3-2" date="1361534400">- removed three files with an unfree license from Source (fixes #912694)</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.3-4" date="1388145600">- Mass rebuild 2013-12-27</changelog>
  <changelog author="Honza Hor&#xE1;k &lt;hhorak@redhat.com&gt; - 1.2.3-4" date="1389614400">- Build against libdb, not compat libdb4
  Resolves: #1044991</changelog>
  <changelog author="Daniel Mach &lt;dmach@redhat.com&gt; - 1.2.3-6" date="1390564800">- Mass rebuild 2014-01-24</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.5-1" date="1589544000">- Resolves: #1761248 (Update to 1.2.5)</changelog>
</package>
<package pkgid="a6027ab37d98dceecc858f52f00a472ed8c699321173216c60fa28952e80a5cd" name="bpftool" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="bd63914a6b089265ea1a6b25869892afc678d602faf7e97abae4981bb882758a" name="bpftool-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="23045f2557333bddada66cbcdf3f0ab5580b59c442fa0ce73ea91aeea9c036ef" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="c33716d80a364c8c47ec185204ff6eeabedec2dd881b79c8e64c556fcbd83674" name="glibc" arch="src">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="31987482928bd533df1150b135ff9397c7294c89b5639767e11e6c0565b44e32" name="glibc-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="5c400293a49c136014614e42c3b4c78af6e1ebf06c960f979c8d053c13855f44" name="glibc-debuginfo" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="7fefbfcc811a8e9cdca0832db2a7ac100fb1e5b4c01a181d3c6df810c67bbd24" name="glibc-debuginfo-common" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="2a939dc4e60bb4dc67b81dbec99eccc2df4a9184393583f6ff2a45197383c6a2" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="4492dabd58d0d88b5470a0f16debe13fadce79d0ed9d26df093723849e9ffa8f" name="glibc-headers" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="a74a7697cc0103aac83cf305545172a1e58a884a370457fdabcb69c66e29caa5" name="glibc-static" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="26bdc2309f2d4d053219a8a4967b087955ade66c4aadb6246861085a4084529e" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="a2584ef6f3d047222f541708aed961cbdf979cea5f35bcb85ae87a1b3d530de5" name="kernel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="f8ca80bc9dab6d53264909457f842b3bdc50d6baedcd14d680b802ed14199e77" name="kernel" arch="src">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="c317a3d3b3013825efcda64e87c0b0708ba2c445e5f509d495f244306d42d4ef" name="kernel-bootwrapper" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="7d780bdfb473da08edf43d8fccee670767db3400b1543ff59a3720c257f121c7" name="kernel-debug" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="2730370754240c59f8338f4df46434eca9db725dac66a2a5c15a0a731892d2be" name="kernel-debug-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="9b828702f6fa1dcb912734aa16f689eee0a178d33301c2cd197a2a1c87abe7bc" name="kernel-debug-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="2f460463702c8cbb5b0b82320789a5078f0fea320b4d1cc3e8d6b73d6da98c11" name="kernel-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="36631abd6cad9b0565cc6226fa7ba10eabdf3f45ab45f62bf7e19d940de665ed" name="kernel-debuginfo-common-ppc64le" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="4ea997293ef29c9b14adf395c17d0d3122f2323b8d7aa43ce27494037a5eca4b" name="kernel-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="8cec82a1c180d1b7aac333bd58d6a7182bf6aba536dc423a13e57f83d86dabc5" name="kernel-headers" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="f5e4afe6507220c0783d5eab0fffbbc00dac29fd67832ad4f12dd701d60b7fed" name="kernel-tools" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="5cf14d789f454eb962b755ee8e6f09461e3e26292db04fa5b16f326bb4167757" name="kernel-tools-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="bcf1fff0dfbe3c5e1633e2cf4e11f46566978d53706658bbb21d4a7c7dae89fe" name="kernel-tools-libs" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="65f875a52d3233791e788a9d10ed183412757b921328764da2a6f28cbf51f464" name="kernel-tools-libs-devel" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="a59ab442b841142fb0cde6dbe63500b1b3d4515e3fd1fe370b24e7ed35600baf" name="nscd" arch="ppc64le">
  <version epoch="0" ver="2.17" rel="317.el7"/>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-308" date="1579608000">- CVE-2019-19126: rtld: Check __libc_enable_secure before honoring
  LD_PREFER_MAP_32BIT_EXEC (#1775599)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.17-309" date="1579608001">- Fix race condition in tst-waitid (#1235112)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-310" date="1579608002">- Filter "ignore" autofs mount entries in getmntent (#1728915)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.17-311" date="1579608003">- Improve bcopy performance on Intel Haswell (#1772307)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.17-312" date="1579867200">- Update syscall-names.list to current version 5.4. (#1747465)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-313" date="1580212800">- Remove problematic Obsoletes: (#1795573)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-314" date="1580299200">- Disable libio vtable validation for interposed pre-2.1 stdio handles (#1775816)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-315" date="1580299201">- argp: Do not override GCC keywords with macros (#1763325)</changelog>
  <changelog author="Carlos O'Donell &lt;carlos@redhat.com&gt; - 2.17-316" date="1580385600">- Adjust security hardening changes for 64-bit POWER BE due to
  toolchain limitations (#1793853)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.17-317" date="1589284800">- Do not clobber errno in nss_compat (#1834816)</changelog>
</package>
<package pkgid="f1ea65fc771321f53d14169b58efb32fdbf975943f28d3d2a03e99b905e0db94" name="perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="580f6b3e0db82fa99070a30aef6a7beafbd65abd6592e85e93ade59dc29f7126" name="perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="594bb5a60c2f3e6dfe0b976f6152731cd6d9a25dbd0da5b2c3827bffd6fd58d9" name="python-perf" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
<package pkgid="37987f47fad037245b9da28d47d383328fd3cc5069dc350eb21bb8a48b4dfab5" name="python-perf-debuginfo" arch="ppc64le">
  <version epoch="0" ver="3.10.0" rel="1160.el7"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1151.el7]" date="1592481600">- [netdrv] qede: Fix multicast mac configuration (Michal Schmidt) [1740064]
- [scsi] sd_dif: avoid incorrect ref_tag errors on 4K devices larger than 2TB (Ewan Milne) [1833528]
- [hid] HID: hiddev: do cleanup in failure of opening a device (Torez Smith) [1814257] {CVE-2019-19527}
- [hid] HID: hiddev: avoid opening a disconnected device (Torez Smith) [1814257] {CVE-2019-19527}
- [x86] x86: make mul_u64_u64_div_u64() "static inline" (Oleg Nesterov) [1845864]
- [mm] mm: page_isolation: fix potential warning from user (Rafael Aquini) [1845620]
- [s390] s390/mm: correct return value of pmd_pfn (Claudio Imbrenda) [1841106]
- [fs] fs/proc/vmcore.c:mmap_vmcore: skip non-ram pages reported by hypervisors (Lianbo Jiang) [1790799]
- [kernel] kernel/sysctl.c: ignore out-of-range taint bits introduced via kernel.tainted (Rafael Aquini) [1845356]
- [documentation] kernel: add panic_on_taint (Rafael Aquini) [1845356]
- [fs] ext4: Remove unwanted ext4_bread() from ext4_quota_write() (Lukas Czerner) [1845379]
- [scsi] scsi: sg: add sg_remove_request in sg_write ("Ewan D. Milne") [1840699] {CVE-2020-12770}
- [fs] fs/binfmt_elf.c: allocate initialized memory in fill_thread_core_info() (Donghai Qiao) [1832062] {CVE-2020-10732}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1152.el7]" date="1592568000">- [nvmem] nvmem: properly handle returned value nvmem_reg_read (Vladis Dronov) [1844409]
- [mailbox] PCC: fix dereference of ERR_PTR (Vladis Dronov) [1844409]
- [kernel] futex: Unlock hb-&gt;lock in futex_wait_requeue_pi() error path (Vladis Dronov) [1844409]
- [fs] aio: fix inconsistent ring state (Jeff Moyer) [1845326]
- [vfio] vfio/mdev: make create attribute static (Vladis Dronov) [1837549]
- [vfio] treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500 (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Synchronize device create/remove with parent removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid creating sysfs remove file on stale device removal (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Improve the create/remove sequence (Vladis Dronov) [1837549]
- [vfio] treewide: Add SPDX license identifier - Makefile/Kconfig (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid inline get and put parent helpers (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Fix aborting mdev child device removal if one fails (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Follow correct remove sequence (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid masking error code to EBUSY (Vladis Dronov) [1837549]
- [include] vfio/mdev: Drop redundant extern for exported symbols (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Removed unused kref (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Avoid release parent reference during error path (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: Add iommu related member in mdev_device (Vladis Dronov) [1837549]
- [vfio] vfio/mdev: add static modifier to add_mdev_supported_type (Vladis Dronov) [1837549]
- [vfio] vfio: mdev: make a couple of functions and structure vfio_mdev_driver static (Vladis Dronov) [1837549]
- [char] tpm/tpm_tis: Free IRQ if probing fails (David Arcari) [1774698]
- [kernel] audit: fix a memleak caused by auditing load module (Richard Guy Briggs) [1843370]
- [kernel] audit: fix potential null dereference 'context-&gt;module.name' (Richard Guy Briggs) [1843370]
- [nvme] nvme: limit number of IO queues on Dell/Samsung config (David Milburn) [1837617]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1153.el7]" date="1593259200">- [x86] mm: Fix mremap not considering huge pmd devmap (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm, dax: check for pmd_none() after split_huge_pmd() (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: streamline move_page_tables()'s move_huge_pmd() corner case (Rafael Aquini) [1843437] {CVE-2020-10757}
- [mm] mm: mremap: validate input before taking lock (Rafael Aquini) [1843437] {CVE-2020-10757}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_ret_wmm_get_status() (Jarod Wilson) [1844070] {CVE-2020-12654}
- [wireless] mwifiex: Fix possible buffer overflows in mwifiex_cmd_append_vsie_tlv() (Jarod Wilson) [1844026] {CVE-2020-12653}
- [net] netfilter: nf_conntrack_h323: lost .data_len definition for Q.931/ipv6 (Florian Westphal) [1845428]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1154.el7]" date="1593691200">- [fs] gfs2: move privileged user check to gfs2_quota_lock_check (Robert S Peterson) [1798713]
- [fs] gfs2: Fix problems regarding gfs2_qa_get and _put (Robert S Peterson) [1798713]
- [fs] gfs2: don't call quota_unhold if quotas are not locked (Robert S Peterson) [1798713]
- [fs] gfs2: Remove unnecessary gfs2_qa_{get, put} pairs (Robert S Peterson) [1798713]
- [fs] gfs2: Split gfs2_rsqa_delete into gfs2_rs_delete and gfs2_qa_put (Robert S Peterson) [1798713]
- [fs] gfs2: Change inode qa_data to allow multiple users (Robert S Peterson) [1798713]
- [fs] gfs2: eliminate gfs2_rsqa_alloc in favor of gfs2_qa_alloc (Robert S Peterson) [1798713]
- [fs] gfs2: Switch to list_{first,last}_entry (Robert S Peterson) [1798713]
- [fs] gfs2: Clean up inode initialization and teardown (Robert S Peterson) [1798713]
- [fs] gfs2: Minor gfs2_alloc_inode cleanup (Robert S Peterson) [1798713]
- [fs] gfs2: Fix busy-on-umount in gfs2_atomic_open() (Andrew Price) [1812558]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1155.el7]" date="1594296000">- [x86] Revert "x86: respect memory size limiting via mem= parameter" (Joel Savitz) [1851576]
- [mm] Revert "mm/memory_hotplug.c: only respect mem= parameter during boot stage" (Joel Savitz) [1851576]
- [fs] nfsd: only WARN once on unmapped errors ("J. Bruce Fields") [1850430]
- [powerpc] pci/of: Fix OF flags parsing for 64bit BARs (Greg Kurz) [1840114]
- [fs] cifs: fix NULL dereference in match_prepath (Leif Sahlberg) [1759852]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1156.el7]" date="1594382400">- [fs] gfs2: Fix regression due to unwanted gfs2_qa_put (Robert S Peterson) [1798713]
- [include] signal: Unfairly acquire tasklist_lock in send_sigio() if irq disabled (Waiman Long) [1838799]
- [fs] signal: Don't take tasklist_lock if PID type is PIDTYPE_PID (Waiman Long) [1838799]
- [vfio] vfio/pci: Fix SR-IOV VF handling with MMIO blocking (Alex Williamson) [1820632] {CVE-2020-12888}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1157.el7]" date="1594814400">- [fs] signal: Don't send signals to tasks that don't exist (Vladis Dronov) [1856166]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1158.el7]" date="1594900800">- [redhat] switch secureboot kernel image signing to release keys (Jan Stancek) []</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1159.el7]" date="1596715200">- [kernel] modsign: Import certificates from optional MokListRT (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Support multiple signatures in verify_pefile_signature (Lenny Szubowicz) [1862840]
- [crypto] crypto/pefile: Tolerate other pefile signatures after first (Lenny Szubowicz) [1862840]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [3.10.0-1160.el7]" date="1597752000">- [kernel] modsign: Add nomokvarconfig kernel parameter (Lenny Szubowicz) [1867857]
- [firmware] modsign: Add support for loading certs from the EFI MOK config table (Lenny Szubowicz) [1867857]
- [kernel] modsign: Move import of MokListRT certs to separate routine (Lenny Szubowicz) [1867857]
- [kernel] modsign: Avoid spurious error message after last MokListRTn (Lenny Szubowicz) [1867857]</changelog>
</package>
</otherdata>